At 01:50 PM 1/21/99 -0500, Bill Strosberg wrote:
>Hello All,
>
>I'm using the rc.firewall script from dranch's TrinityOS, and everything is
>working fine with one minor exception.
>
-- snip --
>It appears rc.firewall is rejecting the traffic (as it is supposed to do
>normally) and not letting the address renew.
>
>Some config info:
>
>intrfc connects to             IP address
>====   =================       ============
>eth0   local network           192.168.x.y     (statically assigned right now)
>eth1   DHCP to cable modem     <dynamic>
>
>Once I get this working I will go the next step and enable the MASQ box to
>be a DHCP server on eth0, while it is a DHCP client on eth1.
>
>I've attempted to "reverse" dranch's INPUT rule to allow DHCP OUTPUT but
>have failed miserably so far.

Try the following:

# DHCP from the outside
/sbin/ipfwadm -I -a accept -W $extif -P udp -S $universe 67 -D $universe 68

# DHCP from the outside
/sbin/ipfwadm -O -a accept -W $extif -P udp -S $universe 68 -D $universe 67  

Where $exitif is your cable modem interface.

Cheers,

Eddie
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]

Reply via email to