Erich,
 
Thanks, dhcp on the local interface was what I needed!
 
Matt

----- Original Message ----
Hi
MATTHEW CARTTER wrote:
> Hi,
> 
> I am running Beta 3 for Bering-uClibc 3.1.1 with ppp/pppoe. I am using 
> dnsmasq with ppp/pppoe. I am able to connect to fw and the net when I use a 
> static IP address and get the upstream nameservers via 
> resolv-file=/etc/ppp/resolv.conf
> 
> I am having trouble using dnsmasq as dhcpd server. The DHCP server is 
> enabled. When I change my network connection to use DHCP on my pc, I cannot 
> access fw or the net with a browser. I am unable to ping the fw. The 
> Shorewall interfaces and rules files are below.
> 
> #
> # Shorewall version 3.4 - Interfaces File
> #
> # For information about entries in this file, type "man shorewall-interfaces"
> #
> # For additional information, see
> # > #
> ###############################################################################
> #ZONE INTERFACE BROADCAST OPTIONS
> net ppp0 -
> loc eth1 detect 
> #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
you are missing dhcp in the options of the local interface
cheers
Erich
 
http://www.shorewall.net/3.0/Documentation.htm#Interfaces


----- Original Message ----
From: MATTHEW CARTTER <mcart...@sbcglobal.net>
To: leaf-user@lists.sourceforge.net
Sent: Sun, May 23, 2010 10:26:24 PM
Subject: trouble using dnsmasq as dhcpd server

Hi,

I am running Beta 3 for Bering-uClibc 3.1.1 with ppp/pppoe.  I am using dnsmasq 
with ppp/pppoe.  I am able to connect to fw and the net when I use a static IP 
address and get the upstream nameservers via resolv-file=/etc/ppp/resolv.conf

I am having trouble using dnsmasq as dhcpd server.  The DHCP server is 
enabled.  When I change my network connection to use DHCP on my pc, I cannot 
access fw or the net with a browser.  I am unable to ping the fw.  The 
Shorewall interfaces and rules files are below.

#
# Shorewall version 3.4 - Interfaces File
#
# For information about entries in this file, type "man shorewall-interfaces"
#
# For additional information, see
# http://www.shorewall.net/3.0/Documentation.htm#Interfaces
#
###############################################################################
#ZONE    INTERFACE    BROADCAST    OPTIONS
net    ppp0            -
loc    eth1            detect          
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

#
# Shorewall version 3.4 - Rules File
#
# For information on the settings in this file, type "man shorewall-rules"
#
# See http://www.shorewall.net/3.0/Documentation.htm#Rules for additional 
information.
#
#############################################################################################################
#ACTION    SOURCE        DEST        PROTO    DEST    SOURCE        ORIGINAL    
RATE        USER/    MARK
#                        PORT    PORT(S)        DEST        LIMIT        GROUP
#SECTION ESTABLISHED
#SECTION RELATED
SECTION NEW
#      Accept DNS connections from the firewall to the network
#      and from the local network to the firewall (in case dnsmasq is running)
DNS/ACCEPT  fw          net
DNS/ACCEPT  loc        fw
ACCEPT      loc        fw      udp      67,68

#      Accept SSH connections from the local network for administration
#
# SSH/ACCEPT  loc        fw

#      Allow Ping to Firewall and from Firewall
#
Ping/ACCEPT  net        fw
Ping/ACCEPT  loc        fw
Ping/ACCEPT  fw        net
Ping/ACCEPT  fw        loc

#      Allow traceroute from firewall
#
Trcrt/ACCEPT fw          net

#      Allow local network to access weblet/webconf
#
Web/ACCEPT  loc        fw
# timeserver (allow syncing with time servers (default: pool.ntp.org))
NTP/ACCEPT        fw      net
# timeserver (allow LAN clients to sync with the time service on the router)
# NTP/ACCEPT        loc    fw
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

I followed the directions found here: 
http://leaf.sourceforge.net/doc/buci-dnsmasq3.html

I suspect that I have not correctly configured Shorewall to use dhcpd.

Thanks in advance for your help.

Matt


------------------------------------------------------------------------------

------------------------------------------------------------------------
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Reply via email to