[Dnsmasq-discuss] Re: dhcp doesn't work

Simon Kelley simon at thekelleys.org.uk
Tue Feb 13 21:12:50 GMT 2007


Johannes Graumann wrote:
> Simon Kelley wrote:
> 
> 
>>The classic answer is probably firewall rules: ISC dhcpd bypasses the
>>firewall: dnsmasq doesn't. The requirements are in the FAQ. Quote:
>>
>>    For the dnsmasq daemon to operate it's vital that UDP packets to
>>    and from ports 67 and 68 and broadcast packets with source
>>    address 0.0.0.0 and destination address 255.255.255.255 are not
>>    dropped by iptables/ipchains.
> 
> BINGO - me idiot! But I was kind of taken off track by the fact that dhcpd3
> worked ...
That gets lots of people.

> adding 'dhcp' to the proper entry in /etc/shorewall/interfaces
> solved the problem - could have figured that out on my own!
> 
> 
>>Oh, and you can replicate "deny unknown-clients;" by changing the
>>dhcp-range line to
>>
>>dhcp-range=192.168.0.3,static,12h
>>
>>"log-facility local7;" becomes
>>
>>log-facility=local7
>>
>>and "authoritative;" becomes
>>
>>dhcp-authoritative
> 
> Thanks for those! Just one question: '192.168.0.3' in this context just
> defines the subnet to use, no? So would '192.168.0.0' work as well?
> 
Correct, yes it would.

> Thanks for the amazingly fast rescue by the MAN himself! Keep at the good
> Debianing - please!
> 

My pleasure.


Cheers,

Simon.

> Joh
> 
> 
> 
> 
> _______________________________________________
> Dnsmasq-discuss mailing list
> Dnsmasq-discuss at lists.thekelleys.org.uk
> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
> 




More information about the Dnsmasq-discuss mailing list