On Saturday 29 November 2003 21:40, Alistair Tonner wrote: > On November 29, 2003 07:05 pm, zynkx wrote: > > dhcrelay howto is no big deal you know... ;) > > > > gonna put it all to accept to see how it goes and i'll > > let you all know ;))) > > ummm.. > dhcp uses tcp/udp 67 + 68 does it not folks? > and somethling like 547 for ipv6? Hmm, bootstrap=dhcp=tcp/udp 67:68 ? I thought dhcp ran on a lower protocol level than tcp/ip, but if this is true then this should work. > > iptables -A INPUT -p tcp -s ${client ip range} -d 255.255.255.255 -m > multiport --dport 67:68 -j ACCEPT > > iptables -A INPUT -p udp -s ${client ip range} -d 255.255.255.255 -m > multiport --dport 67:68 -j ACCEPT > > and appropriate equivalient rules on the OUTPUT chain should make > this work shouldn't it? Sounds like a winner to me! synkx: Does it work? Jeff