Very Computer

I am developing a Group firewall for my cube, filled with PC's, I would
like to have several of the clients inside the firewall recieve their IP
setup via DHCP from an external DHCP server.  Essentially I would like to
place a Linux ipchains firewall infront of several PCs who connect to the
internal LAN and not have to make any client changes.  Can I use the
Firewall as a dhcp-relay-agent.  I an a linux novice but have had very
good success with the HOW-TO's

--
Posted via CNET Help.com
http://www.help.com/

Hi johno vegas:

Quote:

> I am developing a Group firewall for my cube, filled with PC's, I would
> like to have several of the clients inside the firewall recieve their IP
> setup via DHCP from an external DHCP server.  Essentially I would like to
> place a Linux ipchains firewall infront of several PCs who connect to the
> internal LAN and not have to make any client changes.  Can I use the
> Firewall as a dhcp-relay-agent.  I an a linux novice but have had very
> good success with the HOW-TO's

From my firewall rc.d firewall script:

ipchains -I input  1 --source-port 67 --destination-port 68 -p udp -j ACCEPT
ipchains -I output 1 --source-port 68 --destination-port 67 -p udp -j ACCEPT

These two lines will insert rules to allow DHCP packets pass through your
firewall. The former line permits traversal of responses from the DHCP,
whereas the latter allows clients to send DHCP requests through the
firewall. For improved security, restrict these rules to the appropiate
interfaces with the "-i interface" option.

Jos Luis Domingo Lpez