So what you're saying is that there's no "ip_conntrack_dhcp" function
builtin, analogous to ip_conntrack_ftp, that would maintain the
relationship in spite of the different port numbers, right?

[EMAIL PROTECTED] wrote:
> Since dhcp requests go out on port 68, and responses come back on port 67, 
> connection tracking will not relate them. you'll need to explicitly open 
> up a hole for the returning response.

-- 
James Garrison                                Athens Group, Inc.
mailto:[EMAIL PROTECTED]                    5608 Parkcrest Dr
http://www.athensgroup.com                    Austin, TX 78731
PGP: RSA=0x92E90A3B DH/DSS=0x498D331C         (512) 345-0600 x150



Reply via email to