Signed-off-by: Aleksandr Alekseev <alexander.alekseev@xxxxxxxxxxxxx> --- src/nwfilter/xml/allow-dhcp-server.xml | 4 ++-- src/nwfilter/xml/allow-dhcp.xml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/src/nwfilter/xml/allow-dhcp-server.xml b/src/nwfilter/xml/allow-dhcp-server.xml index 37e708ed4b..7fb426a660 100644 --- a/src/nwfilter/xml/allow-dhcp-server.xml +++ b/src/nwfilter/xml/allow-dhcp-server.xml @@ -1,7 +1,7 @@ <filter name='allow-dhcp-server' chain='ipv4'> - <!-- accept outgoing DHCP requests --> - <!-- note, this rule must be evaluated before general MAC broadcast + <!-- accept outgoing DHCP requests + note, this rule must be evaluated before general MAC broadcast traffic is discarded since DHCP requests use MAC broadcast --> <rule action='accept' direction='out' priority='100'> <ip srcipaddr='0.0.0.0' diff --git a/src/nwfilter/xml/allow-dhcp.xml b/src/nwfilter/xml/allow-dhcp.xml index d66d2b6668..d205176011 100644 --- a/src/nwfilter/xml/allow-dhcp.xml +++ b/src/nwfilter/xml/allow-dhcp.xml @@ -1,7 +1,7 @@ <filter name='allow-dhcp' chain='ipv4'> - <!-- accept outgoing DHCP requests --> - <!-- not, this rule must be evaluated before general MAC broadcast + <!-- accept outgoing DHCP requests + note, this rule must be evaluated before general MAC broadcast traffic is discarded since DHCP requests use MAC broadcast --> <rule action='accept' direction='out' priority='100'> <ip srcipaddr='0.0.0.0' -- 2.28.0.97.gdc04167d37