Jason...what I did instead of telling it not to bind (I couldn't find a 
directive, either) was to tell IPtables to only accept port 67 connections 
on my internal interface, eth1:

iptables -A INPUT -i eth1 -p udp -m udp --dport 67 -j ACCEPT
iptables -A INPUT -i eth1 -p udp -m tcp --dport 67 -j ACCEPT

On Fri, 8 Feb 2002, Jason Costomiris wrote:

> This afternoon's project was to build a masq'ing firewall, complete
> with DHCP, split DNS, and all the trimmings.  Got it done, but I'm 
> having a bit of a difficult time with telling the ISC dhcpd 3.0 
> (out of Rawhide) to stop binding to my external i/f.
> 
> I don't have a subnet{ } section that covers the particular subnet in 
> question, so the syslog informs me that because I don't mention anything
> about the subnet on that i/f (in my case, eth0), it will not respond to
> queries on the interface.  That's good and all, but netstat reveals this:
> 
> udp        0      0 0.0.0.0:67              0.0.0.0:*
> 
> So, even though it's not responding to queries on that eth0 interface, it's 
> still binding the port to the interface.  Thoughts on how to get it to stop
> behaving like this?
> 
> 



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to