dhcp server and iptables firewall
Hi,
Ive got a dhcp server on one network segment, 192.168.10.x, and my clients on another segment, 192.168.100.x . these are seperated by an iptables firewall on a multihomed machine. my problem is that when a machine on the .100 subnet sends a dhcp request to 255.255.255.255:67, i cant seem to make it forward to the 192.168.10.x segment. However, if i eventually get that far, will the dhcp server receive a proper arp reply for the client on another nic and network segment? should i be forwarding all arp between the two network segments? if so, how? i'd appreciate any help. right now im tying a firewall conf of:
iptables -t nat -I PREROUTING -i eth3 -p udp -s 0.0.0.0 --sport 68 -d 255.255.255.255 --dport 67 -j DNAT --to-destination 192.168.10.93
iptables -A INPUT -p udp --dport 67 -j ACCEPT
the dhcp machine accepts everything right now, it wont be locked down until i resolve this problem. thanks in advance for any help.
--paul
|