On 08/08/2012 12:56 PM, Jatin K wrote:
is there any way or method available to configure iptables to allow only
dhcp server assigned ip
To acheive this
* I setup a (CSV) file listing IP ans MAC
* I write a script building the DHCP configuration file from it
* I write an iptables script to forward only (IP, MAC) tuple, dropping
whetever alse
* I only use the CSV file when adding a new host to the LAN
** I flush+rebuild iptables rules & restart DHCPd when I add a new host
Drawback:
- On the LAN, one can always steal an IP address
- You need to control duplicate when LAN grows (mine is a /16)
--
RMA.
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
