From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jeroen Vriesman Subject: Re: How to setup netfilter to stop outbound DHCP? Date: Sun, 29 Feb 2004 21:22:00 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20040229212200.6aa76976.j.vriesman@prompt.nl> References: <20040229143928.7884.68000.Mailman@netfilter-sponsored-by.noris.net> <001001c3fefd$daf70a70$6401a8c0@LSchmitt> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <001001c3fefd$daf70a70$6401a8c0@LSchmitt> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org You can configure dhcp and dns itself to only listen/respond on one NIC. No need to make any filter rules. Won't help the network support people, for most network support people crazyness is a default state of mind. Cheers, Jeroen. On Sun, 29 Feb 2004 13:54:29 -0600 "Dr. Lawrence J. Schmitt" wrote: > > I am setting up a lab for students to configure and experiment with > Linux. I need to set up something that will keep responses to DHCP > requests from leaving the lab to keep from driving the network support > people crazy. > 1. What is the appropriate tool to use? > 2. Can anyone suggest an iptables rule that will block either > dhcp requests from entering the lab subnet or responses from > exiting. > 3. I would like to set up one pc running Linux as a router and > firewall, filter that also would run DHCP and DNS for the local > lab as well as block responses to DHCP requests on the nic that > is connected to the campus network. > > Any thoughts or comments are appreciated. > > Thanks in advance, > > Larry Schmitt > > > > >