ipmasq/rules/A10dhcpd.rul



# From Kalle Olavi Niemitalo <tosi@ees2.oulu.fi>:

# Here's my /etc/ipmasq/rules/A10dhcpd.rul file in case you'd
# like to add it in the examples directory.  It's somewhat
# stricter than /usr/doc/ipmasq/examples/Z99dhcpd.rul.  Also, I'm
# using priority A10 rather than Z99 because some of my other
# rules would reject the packets.
#
# This works with dhcp_1.0.2-0.1 and the Windows 95 DHCP client.
# The ipfwadm invocations are untested.

if [ -n "$INTERNAL" ]; then
    for i in $INTERNAL; do
    ipnm_cache $i
    case $MASQMETHOD in
    ipfwadm)
        $IPFWADM -I -i accept -S 0.0.0.0/32 68 -D 255.255.255.255/32 67 -W $i -P udp
        $IPFWADM -O -i accept -S $IPOFIF/32 67 -D 255.255.255.255/32 68 -W $i -P udp
        ;;
    ipchains)
        $IPCHAINS -I input -j ACCEPT -s 0.0.0.0/32 68 -d 255.255.255.255/32 67 -i $i -p udp
        $IPCHAINS -I output -j ACCEPT -s $IPOFIF/32 67 -d 255.255.255.255/32 68 -i $i -p udp
        ;;
    netfilter)
        $IPTABLES -I INPUT -j ACCEPT -s 0.0.0.0/32 68 -d 255.255.255.255/32 67 -i $i -p udp
        $IPTABLES -I OUTPUT -j ACCEPT -s $IPOFIF/32 67 -d 255.255.255.255/32 68 -i $i -p udp
    esac
    done
fi