-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 04/12/14 01:06, Oliver-Tobias Ripka wrote: > - DHCP still works. Which is strange, isn't? I configured the > firewall to drop everything so DHCP should not work. > > To debug a little I inserted some code into > /etc/NetworkManager/dispatcher.d/00-firewall.sh to see what the > state if ifconfig and iptables is right before bringing up the > firewall: > > Result: The IP adress is already is configured (DHCP was renewed) > and the iptables configuration is still set to DROP. So I am not > sure how the DHCP packets could get through. Maybe I have a flaw in > my debugging procedure or this is another issue.
Is it possible that the DHCP client still has a valid lease that was granted before the firewall rules were changed? Perhaps deleting any leases in /var/lib/dhcp and bringing the interface up again will change the result? Cheers, Michael -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBCAAGBQJUgBj+AAoJEBEET9GfxSfMyIAH/2KzAlKkZsYLoQo9wwF2RHoL I4Tc9wsMplvtb70BVYDC21IqUJI1yMyVOBAICHcaxpCM5ByljhuHqYn1fIajB3Qo ER0kESBfx1S2XXs9kWUU9nU+fJdS45f5mWDxv84QACgao9AZG3IkgVrmko4c1xN4 Wjn2Y6n9iZxzFzbpgOgeNBKsDtRxYA98FSXGewwuHrLlcyA+2yipD5tokJ17cJod VTAlLIhyQ6BfQwmJ4DOWF/AC8auyssXc3Xr6QuNbB717wrCUfJdriZv8dr9XlZNz 4BTKUEkm6u+svM4geQVKRNCBp12wJHOUjLr3Kgy7jKvRIrBBhxOQBGEyNn9AJEs= =dh/h -----END PGP SIGNATURE----- _______________________________________________ Tails-dev mailing list Tails-dev@boum.org https://mailman.boum.org/listinfo/tails-dev To unsubscribe from this list, send an empty email to tails-dev-unsubscr...@boum.org.