Olaf Meeuwissen wrote: > Basically, I'd like to keep the setup as closed as possible so I make > a hole in /etc/dhclient-enter-hooks during the PREINIT stage to let > the DHCPDISCOVER broadcast out (and a reply back in eventually, taking > this one step at a time ;-). At least, that's what I thought I should > do, but I noticed that packets are not logged!
I think (but not sure) DHCP client is using (so called) raw sockets which are below the layer where iptables is in the kernel. That's why iptables is unable to see the packets. (There is an option for Raw sockets in the kernel, and it can be used only with root privileges.) KoGa -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]