All of lore.kernel.org
 help / color / mirror / Atom feed
* AW: bootp problems
@ 2004-04-07  7:50 Jochen Vogel
  2004-04-07  9:29 ` Antony Stone
  0 siblings, 1 reply; 2+ messages in thread
From: Jochen Vogel @ 2004-04-07  7:50 UTC (permalink / raw)
  To: 'netfilter@lists.netfilter.org'

> > [DialIn]2.2.2.2----2.2.2.1[FW]1.1.1.1---1.1.1.2[DHCP]
> >
> > the DialIn tries to get an IP from the DHCP Server.
> 
> You need a DHCP relay on the 2 network to do this.
> 
> DHCP requests do not cross routers (they are ethernet broadcasts).

Hi antony,

The DialIN should play Relay

FIRST the DialIn try it DIRECTLY to the DHCP Server
with tcpdump on 2.1 i can see 0.0.0.0:68 > 1.1.1.2:67
It doesnt work and i CANT see any entry in the iptables log

SECOND the DialIn try it with BROADCAST
with tcpdump on 2.1 i can see 0.0.0.0:68 > 255.255.255.255:67
It doesnt work and i CAN see an entry in the iptables log

Thx for more informations
Jo


^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: AW: bootp problems
  2004-04-07  7:50 AW: bootp problems Jochen Vogel
@ 2004-04-07  9:29 ` Antony Stone
  0 siblings, 0 replies; 2+ messages in thread
From: Antony Stone @ 2004-04-07  9:29 UTC (permalink / raw)
  To: 'netfilter@lists.netfilter.org'

On Wednesday 07 April 2004 8:50 am, Jochen Vogel wrote:

> > > [DialIn]2.2.2.2----2.2.2.1[FW]1.1.1.1---1.1.1.2[DHCP]
> > >
> > > the DialIn tries to get an IP from the DHCP Server.
> >
> > You need a DHCP relay on the 2 network to do this.
> >
> > DHCP requests do not cross routers (they are ethernet broadcasts).
>
> Hi antony,
>
> The DialIN should play Relay
>
> FIRST the DialIn try it DIRECTLY to the DHCP Server
> with tcpdump on 2.1 i can see 0.0.0.0:68 > 1.1.1.2:67
> It doesnt work and i CANT see any entry in the iptables log

How is Linux supposed to route a reply packet from 1.1.1.2:67 back to 
0.0.0.0:68?

> SECOND the DialIn try it with BROADCAST
> with tcpdump on 2.1 i can see 0.0.0.0:68 > 255.255.255.255:67
> It doesnt work and i CAN see an entry in the iptables log

Broadcasts do not cross routers.   That is nothing to do with netfilter (and 
no, you cannot create any netfilter rules to make a broadcast cross to the 
other side).

Maybe your firewall needs to be a bridge?

Regards,

Antony.

-- 
Christmas was just an opportunity to upgrade to kernel 2.6 while no-one was 
around to notice the downtime.

                                                     Please reply to the list;
                                                           please don't CC me.



^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2004-04-07  9:29 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-04-07  7:50 AW: bootp problems Jochen Vogel
2004-04-07  9:29 ` Antony Stone

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.