Re: DHCP server in FW-1 module

Hi again.

I do not have any drop log. With fw monitor I see the
"i" and "I"
traces, and in SmartViewTracker I'm obtaining the
"accept" log.
But it seems that the module is not delivering the requests
to the DHCP
daemon...

Thanks again

	Esteban



El mar, 27-03-2007 a las 17:21 +0200, pkc_mls escribió:
> Esteban Serrano a écrit :
> > Hi everybody.
> >
> > I'm trying to deploy a DHCP server in a FW-1
module, which is currently
> > running across a Crossbeam X40 chassis - Red Hat
3.
> > I've succesfully installed the dhcpd/dhcrelay rpm
in the module (versión
> > 3.0.1), although I'm not being able to assign
IPs.
> >
> > According to CheckPoint's knowledge base
guidelines, I've already
> > modified dhcp* UDP services - no protocol, reply
allowed -, and I've
> > added a rule in FW-1's policy which looks like 
> >
> > Any -> Any -> DHCP* | Allow | Log
> >
> > With "fw monitor -e 'accept [22:2,b] = 67 or
[20:2,b] = 68;'" I see the
> > incoming "i" and "I" traces,
though no outgoing packets are traced.
> > I do not see any system log either - except the
ones corresponding to
> > the DHCP service start.
> >
> > Any idea about what is going wrong? Any help would
be appreciated.
> >
> >   
> don't you have any antispoofing settings that drops the
packets sent to 
> the dhcp broadcast address ?
> do you have any log about antispoofing on the interface
where the dhcp 
> comes from ?
> > Thanks in advance
> >
> > Esteban
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to LISTSERVamadeus.us.checkpoint.com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http:
//www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-ownerts.checkpoint.com
> > =================================================
> >
> >   
> 
> 
> 	
> 
> 	
> 		
>
____________________________________________________________
_______________ 
> Yahoo! Mail rinvente le mail ! Dcouvrez le nouveau
Yahoo! Mail et son interface rvolutionnaire.
> http://fr.mail.yahoo.com

> 
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
> 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================