From mboxrd@z Thu Jan 1 00:00:00 1970 From: Unknown Subject: Re: source-mac filtering Date: Mon, 12 Jan 2004 01:10:08 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <29606.4762086191$1073888030@news.gmane.org> References: <20040111163756.GA6168@cannon.eng.us.uu.net> <1073847935.13069.16.camel@carve.personal.localdomain> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: From: Alistair Tonner <> In-Reply-To: <1073847935.13069.16.camel@carve.personal.localdomain> Content-Disposition: inline Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: "Tarek W." , netfilter@lists.netfilter.org On January 11, 2004 02:05 pm, Tarek W. wrote: > On Sun, 2004-01-11 at 18:37, Ramin Dousti wrote: > > dhcpd takes and puts packets by netlink sockets which bypass the whole > > IP stack. So in short, you cannot filter the requests nor the response. > > > > Ramin I'll accept that .. but I have a question ... is ARP routing not related?? Are ARP queries not ethernet broadcasts on a similar level to DHCP broadcasts?? (okay .. thats mighty off topic ..but perhaps its something we can consider network related) Alistair > > > > this is slightly off... iirc, some of the negotiation happens that way, > further negotiation does not... what I'm sure of however is that if u > don't explicitely allow dhcpd traffic server-side, negotiation does not > work client-side... which means that not all traffic if any bypasses > netfilter... don't have the time to investigate further server-side... > sorry...