i wouldnt be so concerned with localhost (127.0.0.1) as i would with your external IP. I recommend using an external source to scan your box and report what is open. I regularly use grc.com's scan but there are dozens that have been recommended by other users on this forum as well. If you start DROP'ing localhost with rules you are likely to cause yourself more headaches than you want.
As far as dhcpclient, might this be open because you get an IP from a dhcp server (ISP)?
hope this helps
|