-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 04/12/14 01:06, Oliver-Tobias Ripka wrote:
> - DHCP still works. Which is strange, isn't? I configured the
> firewall to drop everything so DHCP should not work.
> 
> To debug a little I inserted some code into 
> /etc/NetworkManager/dispatcher.d/00-firewall.sh to see what the
> state if ifconfig and iptables is right before bringing up the
> firewall:
> 
> Result: The IP adress is already is configured (DHCP was renewed)
> and the iptables configuration is still set to DROP. So I am not
> sure how the DHCP packets could get through. Maybe I have a flaw in
> my debugging procedure or this is another issue.

Is it possible that the DHCP client still has a valid lease that was
granted before the firewall rules were changed? Perhaps deleting any
leases in /var/lib/dhcp and bringing the interface up again will
change the result?

Cheers,
Michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBCAAGBQJUgBj+AAoJEBEET9GfxSfMyIAH/2KzAlKkZsYLoQo9wwF2RHoL
I4Tc9wsMplvtb70BVYDC21IqUJI1yMyVOBAICHcaxpCM5ByljhuHqYn1fIajB3Qo
ER0kESBfx1S2XXs9kWUU9nU+fJdS45f5mWDxv84QACgao9AZG3IkgVrmko4c1xN4
Wjn2Y6n9iZxzFzbpgOgeNBKsDtRxYA98FSXGewwuHrLlcyA+2yipD5tokJ17cJod
VTAlLIhyQ6BfQwmJ4DOWF/AC8auyssXc3Xr6QuNbB717wrCUfJdriZv8dr9XlZNz
4BTKUEkm6u+svM4geQVKRNCBp12wJHOUjLr3Kgy7jKvRIrBBhxOQBGEyNn9AJEs=
=dh/h
-----END PGP SIGNATURE-----
_______________________________________________
Tails-dev mailing list
Tails-dev@boum.org
https://mailman.boum.org/listinfo/tails-dev
To unsubscribe from this list, send an empty email to 
tails-dev-unsubscr...@boum.org.

Reply via email to