From mboxrd@z Thu Jan 1 00:00:00 1970 From: Edmundo Carmona Subject: Re: rules for dhcp server Date: Tue, 20 Sep 2005 08:40:52 -0400 Message-ID: <65aa6af90509200540681f65b8@mail.gmail.com> References: Reply-To: eantoranz@gmail.com Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: Content-Disposition: inline List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org check with netstat to see what port dhcpd is listening to. something like=20 netstat -lutpn | grep dhcp will do. On 9/20/05, Askar wrote: > hi list >=20 > I'm configuring a firewall on dhcp server, i'm a bit confuse which port t= o > allow on INPUT that users (clients) get IP from the server >=20 > from /etc/sevices... >=20 > bootps 67/tcp dhcps #Bootstrap Protocol Server > bootps 67/udp dhcps #Bootstrap Protocol Server > bootpc 68/tcp dhcpc #Bootstrap Protocol Client > bootpc 68/udp dhcpc #Bootstrap Protocol Client > dhcpv6-client 546/tcp #DHCPv6 Client > dhcpv6-client 546/udp #DHCPv6 Client > dhcpv6-server 547/tcp #DHCPv6 Server > dhcpv6-server 547/udp #DHCPv6 Server >=20 > lot of other services do runnig on this machine, however i'm very clear > about all other services, ie which port to allow etc > All the client machines are running MS. Therefore any other good suggesti= on > will be appreciated to machine the network efficient. >=20 > regards >=20 > Askar > -- > Unix is very simple, but it takes a genius to understand the simplicity. > (Dennis Ritchie) >