On Sat, Nov 29, 2003 at 11:04:40PM -0500, Jeffrey Laramie wrote: > Hmm, bootstrap=dhcp=tcp/udp 67:68 ? I thought dhcp ran on a lower protocol > level than tcp/ip, but if this is true then this should work. dhcp uses udp 67/68 (server/client). What is low level protocol is the implementation of the server which bypasses the regular udp sockets and takes the broadcasts off the wire itself. That's why the rules below might be irrelevant. Ramin > > > > > iptables -A INPUT -p tcp -s ${client ip range} -d 255.255.255.255 -m > > multiport --dport 67:68 -j ACCEPT > > > > iptables -A INPUT -p udp -s ${client ip range} -d 255.255.255.255 -m > > multiport --dport 67:68 -j ACCEPT > > > > and appropriate equivalient rules on the OUTPUT chain should make > > this work shouldn't it? > > Sounds like a winner to me! synkx: Does it work? > > Jeff