[Dnsmasq-discuss] Problem using dnsmasq as dhcp

[Kurt H Maier]

On Wed, Jan 04, 2017 at 06:38:30PM +0100, Archimede Pitagorico wrote:
>    I have another question however about this:
>    > ISC's dhcp server uses a lower-level network model than dnsmasq, and can
>    work despite iptables rules to the contrary.
>    How can an app bypass the kernel firewall? Can you please suggest a
>    reference for me to understand better? 

Depending on how it's packaged, it can use something like libpcap to
access networking information, similar to how tcpdump works.  Some
distributors also ship their dhcpd packages with install-time scripts
that molest your firewall rules to ensure it works.

khm