I'm not doing any particular things to block dhcp incoming packets, but in relation to ISP's dhcp server, following lines look in action.
... @0:15 block in log on fxp0 from any to any head 2 ... @2:7 block in quick from any to 255.255.255.255/32 group 2 ... Ipfstat reports a lot of blocks between 20030416.203428 - 20030505.151708 (rule number assignment has changed since). 308484 @6 block in quick from any to 255.255.255.255/32 group 2 I don't see why blocking incoming port 67 doesn't work. Maybe you happened to have passed the packets afterwards ? Just to see if this might be the case, try this on the interface that faces dhcp server. block in log quick on the-interface-in-question proto udp from any to any port = 67 # this line may fold horio shoichi On 12 Jul 2003 10:12:13 -0400 Matthew Juszczak <[EMAIL PROTECTED]> wrote: > Hello, > > For some reason, although my ipf.rules are set tight to block ports 67 > and 68, my dhcpd.log is still receiving DHCPDISCOVER requests. Is there > a way to block incoming DHCPDISCOVER packets from certain subnets > through ipf? Even a "block in all, block out all" doesn't seem to block > them! Thanks! > > -Matt >
