DHCP IssuesB

DHCP IssuesB

[Tim Miller]

I'm pretty new to netfilter so bear with me.  I have a server that has a
quad card, currently the card is configured:

eth0 -> internet
eth1,eth2 -> not active (yet)
eth3 -> internal lan 10.2.0.0/24 network

I am running dhcpd on eth3 and everything works ok, except for the
renewing of addresses.  For example:

1. Connect a laptop to the network and power up, get an address ok.
2. Release the address and then renew the address, get an address ok.
3. Perform a renew on the laptop and it fails.

My rules are setup as follows:

iptables -A INPUT -i eth3 -p udp -s 0.0.0.0 --sport 68 -d 255.255.255.255
	--dport 67 -j ACCEPT
iptables -A INPUT -i eth3 -p udp -s 0.0.0.0 --sport 68 -d 10.2.0.1
	--dport 67 -j ACCEPT
iptables -A INPUT -i eth3 -p udp -s 10.2.0.0/24 --sport 68 -d 10.2.0.1
	--dport 67 -j ACCEPT

iptables -A OUTPUT -i eth3 -p udp -s 0.0.0.0 --sport 67 -d 255.255.255.255
	--dport 68 -j ACCEPT
iptables -A OUTPUT -i eth3 -p udp -s 10.2.0.1 --sport 67
	-d 255.255.255.255 --dport 68 -j ACCEPT
iptables -A OUTPUT -i eth3 -p udp -s 10.2.0.1 --sport 67 -d 10.2.0.0/24
	--dport 68 -j ACCEPT

Does this make sense? What am I missing?

Thanks

-- 
-Tim Miller

"You are who you become"

Email: tj.miller@javaspotlet.com
Registered Linux User #302727

Re: DHCP IssuesB

[Kelly Setzer]

On Thu, Mar 20, 2003 at 08:46:41AM -0600, Tim Miller wrote:
> 
> I'm pretty new to netfilter so bear with me.  I have a server that has a
> quad card, currently the card is configured:
> 
> eth0 -> internet
> eth1,eth2 -> not active (yet)
> eth3 -> internal lan 10.2.0.0/24 network
> 
> I am running dhcpd on eth3 and everything works ok, except for the
> renewing of addresses.  For example:
> 
> 1. Connect a laptop to the network and power up, get an address ok.
> 2. Release the address and then renew the address, get an address ok.
> 3. Perform a renew on the laptop and it fails.

What does your dhcpd log say?

> 
> 
> Does this make sense? What am I missing?
> 

Do a tcpdump while you attempt to renew.  That should be revealing.

Kelly

--
Kelly Setzer, System Administrator/Architect - Placemark Investments
14180 Dallas Pkwy, Suite 200, Dallas, TX 75240
kelly.setzer@placemark.com  http://www.placemark.com
(972)404-8100x41 (work)       (214) 287-3464 (cell)

Re: DHCP Issues

[Tim Miller]

On Thu, 20 Mar 2003, Kelly Setzer wrote:

> What does your dhcpd log say?

DHCPREQUEST for 10.2.0.10 to {mac address}
DHCPPACK on 10.2.0.10 to {mac address}
send_packet: not permitted

>
> Do a tcpdump while you attempt to renew.  That should be revealing.
>
> Kelly
>
> --
> Kelly Setzer, System Administrator/Architect - Placemark Investments
> 14180 Dallas Pkwy, Suite 200, Dallas, TX 75240
> kelly.setzer@placemark.com  http://www.placemark.com
> (972)404-8100x41 (work)       (214) 287-3464 (cell)
>

-- 
-Tim Miller

"You are who you become"

Email: tj.miller@javaspotlet.com
Registered Linux User #302727

Re: DHCP Issues

[Kelly Setzer]

On Thu, Mar 20, 2003 at 10:33:17AM -0600, Tim Miller wrote:
> On Thu, 20 Mar 2003, Kelly Setzer wrote:
> 
> > What does your dhcpd log say?
> 
> DHCPREQUEST for 10.2.0.10 to {mac address}
> DHCPPACK on 10.2.0.10 to {mac address}
> send_packet: not permitted

How are you starting dhcpd?

Kelly

Re: DHCP Issues

[Tim Miller]

On Thu, 20 Mar 2003, Kelly Setzer wrote:

>
> How are you starting dhcpd?

I am running it in the foreground, but eventually it will be run as a
service.

dhcpd -d -f eth3

>
> Kelly
>

-- 
-Tim Miller

"You are who you become"

Email: tj.miller@javaspotlet.com
Registered Linux User #302727