Limit DHCP requests with iptables - problem: Router

Alex Bligh alex at alex.org.uk
Mon Feb 7 16:25:45 UTC 2011



--On 7 February 2011 15:31:46 +0100 Juergen Northe 
<juergen.northe at googlemail.com> wrote:

> oops. Not (A)ppend but (I)nsert should work. I have not tried it yet:
>
> iptables -I INPUT  -i eth0  -p udp -m udp  -m multiport  -m mac
> --mac-source XX:XX:XX:XX:XX -d 255.255.255.255   --dports 68,67  -m
> state --state NEW  -j REJECT

That won't work because all his dhcp queries come with the same
MAC address - the router which is forwarding them.

-- 
Alex Bligh



More information about the dhcp-users mailing list