[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: DHCP not blocked

On Thu, 5 Feb 2004, Pillai, Gopakumar (Gopu) wrote:
> I have a host with two interfaces fxp0 and fxp1. On the fxp1 side I have
> a DHCP Server and on fxp0 side I have a DHCP client.
> 
> I have the following rules on fxp0
> 
> block in quick on fxp0 all
> block out quick on fxp0 all
> 
> The DHCP client should not be getting an IP from the DHCP server, but it
> does, Why and How?

dhclient (like tcpdump) uses bpf and gets packets before pf filters them.