Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 2851 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Allowing DHCP request to Firewall

ahologounis
Aug 27 06:33:38 fw kernel: UDP Drop: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:05:5f:ed:28:54:08:00 SRC=10.113.192.1 DST=255.255.255.255 LEN=342 TOS=0x00 PREC=0x00 TTL=255 ID=13166 PROTO=UDP SPT=67 DPT=68 LEN=322 

The Source address is my ISP DHCP server. I probably need to allow this into the firewall. I am not sure how to handle the destination address which is a broadcast(?)

Can someone step me through the rule procedure?


This thread was automatically locked due to age.
Parents
  • 0
    You should block these requests from your ISP. It is always a good idea to drop broadcast requests from your internal network and also your external network. this may help.
    define networks as follows

    LanBroacast x.x.x.255 255.255.255.255
    WorldBroadcast 255.255.255.255 255.255.255.255

    the x= your internal network

    Define filter rules for the following.

    ext_Interface any WorldBroadcast drop
    Int_network any LanBroadcast drop

    Hope you get the idea. I hope this helps
Reply
  • 0
    You should block these requests from your ISP. It is always a good idea to drop broadcast requests from your internal network and also your external network. this may help.
    define networks as follows

    LanBroacast x.x.x.255 255.255.255.255
    WorldBroadcast 255.255.255.255 255.255.255.255

    the x= your internal network

    Define filter rules for the following.

    ext_Interface any WorldBroadcast drop
    Int_network any LanBroadcast drop

    Hope you get the idea. I hope this helps
Children