LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices



Reply
 
Search this Thread
Old 09-18-2006, 07:01 AM   #1
mightymidget
LQ Newbie
 
Registered: Sep 2006
Posts: 3

Rep: Reputation: 0
Firestarter + Ubuntu + DHCP Help


I use Firestarter with my Ubuntu Dapper Linux desktop.

I have one computer which is connected to the internet via Ethernet Cable modem, that's it, no router, nothing special and no wireless or additional local computers.

For this one desktop machine, do I need to enable any special settings for DHCP to continue to work properly?

What addresses should I allow as incoming? I allow all outgoing permissive since restrictive was causing me problems.

Do I need to block any broadcast traffic? (in advanced settings)

What about blocking traffic from reserved addresses (in advanced settings)

What incoming 68/67 ports should I allow and should I disallow? I see a lot of incoming on those ports from 10.x.x.x for example, should I allow those?

My /etc/hosts file just has 127.0.0.1 for localhost and my username-desktop I would add more to block advertisements and stuff but it gets reset every time so I just leave those two entries in, is this fine or do I need to add my modem's IP in there too by way of the network admin config in Gnome settings? Will addding that there stay?

I'm asking here at linuxquestions.org because there are a lot of security experts here

I don't need dhcpd I take it since I only have one computer connected to the internet?
 
Old 09-19-2006, 07:10 AM   #2
win32sux
Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
you probably won't need to allow any incoming connections at all in order for DHCP (client) to work... as long as you have a rule for ESTABLISHED,RELATED packets, you should be fine... if, however, you do in fact need to let incoming DHCP connections in for whatever reason, you'll want to deal with soure port 67 (UDP) and destination port 68 (UDP)... you'd also wanna use the IP address which your cable modem uses as a source when it sends you packets... for example:
Code:
iptables -I INPUT -p UDP -i eth0 --dport 68 --sport 67 \
-s 172.19.0.1 -j ACCEPT

Last edited by win32sux; 09-19-2006 at 07:16 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Ubuntu DHCP (re-installing, configuring etc) El-Wrongo Linux - Networking 5 06-23-2009 08:30 AM
firestarter at startup- Ubuntu aquaboot Linux - Software 0 03-25-2006 05:23 PM
Firestarter on Ubuntu 5.10 fdahl_009 Linux - Software 1 01-22-2006 10:17 AM
Dhcp and Firestarter Elbryan Linux - Software 10 09-26-2005 03:17 PM
Firestarter "No DHCP client configuration found" Locura Linux - General 1 12-10-2003 11:05 AM


All times are GMT -5. The time now is 10:27 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration