client unable to obtain an IP

crash3m at comcast.net crash3m at comcast.net
Mon Nov 25 07:01:05 CST 2002


I'm running mdk8.2 as a firewall/router.  I'm using ipkungfu to
configure iptables  http://www.linuxkungfu.org/ipkungfu-0.2.0.tgz
According to the author nothing is blocked from $NETWORK, which is
fine by me but I'm trying to setup an internal network that uses dhcp.
After much confusion I tail'ed /var/log/syslog and found that iptables
was denying a request....

Nov 25 00:11:39 pcp662918pcs kernel: INPUT Catch-all - Deny: IN=eth1
OUT= MAC=ff:ff:ff:ff:ff:ff:00:e0:4c:03:1d:8d:08:00 SRC=0.0.0.0
DST=255.255.255.255 LEN=576 TOS=0x00 PREC=0x00 TTL=64 ID=48895 PROTO=UDP
SPT=68 DPT=67 LEN=556

So I added the IP to /etc/ipkungfu/custom.dict and it worked.  I
submitted the 'fix' to the author and he seems to be happy.  But I'm
still left with a couple of questions...  Do all dhcp requests from a
client that does not have an IP come from 0.0.0.0 and is that the normal
'normal' behavior of an iptables scripts?

ML




More information about the Kclug mailing list