Re: allow dhcp in pf

2009-11-24 Thread Henning Brauer
* open...@e-solutions.re [2009-11-24 14:16]: > Using DHCP is not possible, pf block it certainy not. dhc{p,lient} use bpf. outside pf. pf doesn't even see those packets. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail

Re: allow dhcp in pf

2009-11-24 Thread Andreas Mueller
Eugene Yunak wrote: > 2009/11/24 Andreas Mueller : > > Clients most certainly don't send dhcp request packets to your gateway > > but to multicast, so set destination to 255.255.255.255. > > > > Andreas > > Looks like someone doesn't even know how dhcp works, but keeps > suggesting silly things an

Re: allow dhcp in pf

2009-11-24 Thread FRbsd
Otto Moerbeek wrote: > No no no, listen to what claudio wrote. dhcp packets are grabbed by > dhclient or dhcpd before pf sees them. That is very nice to know, i always thought it was filtered :) Steph

Re: allow dhcp in pf

2009-11-24 Thread Eugene Yunak
2009/11/24 Andreas Mueller : > Clients most certainly don't send dhcp request packets to your gateway > but to multicast, so set destination to 255.255.255.255. > > Andreas Looks like someone doesn't even know how dhcp works, but keeps suggesting silly things and ignoring wise man (@claudio) sayin

Re: allow dhcp in pf

2009-11-24 Thread Iñigo Ortiz de Urbina
On Tue, Nov 24, 2009 at 3:45 PM, Otto Moerbeek wrote: > > On Tue, Nov 24, 2009 at 03:37:58PM +0100, Andreas Mueller wrote: > > > open...@e-solutions.re wrote: > > > Hello > > > > > > i added theses lines : > > > pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 67 > > > pass in

Re: allow dhcp in pf

2009-11-24 Thread Otto Moerbeek
On Tue, Nov 24, 2009 at 03:37:58PM +0100, Andreas Mueller wrote: > open...@e-solutions.re wrote: > > Hello > > > > i added theses lines : > > pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 67 > > pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 68 > Clien

Re: allow dhcp in pf

2009-11-24 Thread Andreas Mueller
open...@e-solutions.re wrote: > Hello > > i added theses lines : > pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 67 > pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 68 Clients most certainly don't send dhcp request packets to your gateway but to multica

Re: allow dhcp in pf

2009-11-24 Thread Maurice Janssen
On Tue, Nov 24, 2009 at 05:08:06PM +0400, open...@e-solutions.re wrote: >Hello > >i added theses lines : >pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 67 >pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 68 > >my dhcpd.conf is a standard config... >my hos

Re: allow dhcp in pf

2009-11-24 Thread neal hogan
On Tue, Nov 24, 2009 at 05:08:06PM +0400, open...@e-solutions.re wrote: > Hello > > i added theses lines : > pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 67 > pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 68 > > my dhcpd.conf is a standard config...

Re: allow dhcp in pf

2009-11-24 Thread Tomáš Bodžár
pass out log on $int_if inet proto { tcp, udp } from any to $gw_obsd port 68 # for IPv4 pass out log on $int_if inet6 proto { tcp, udp } from any to $gw_obsd port 546 # for IPv6 On Tue, Nov 24, 2009 at 2:08 PM, wrote: > Hello > > i added theses lines : > pass in on $int_if inet proto { tcp,

Re: allow dhcp in pf

2009-11-24 Thread openbsd
Hello i added theses lines : pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 67 pass in on $int_if inet proto { tcp, udp } from any to $gw_obsd port 68 my dhcpd.conf is a standard config... my hostname.bge0 : inet 192.168.0.1 255.255.255.0 NONE if i configure a machine with