extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-06-20 01:37:59 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update DHCP document for forwarding.

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2010-01-12 07:55:58 -08:00
parent 4464094773
commit 341617b5b8
1 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
docs/dhcp.xml
View File

@ -26,6 +26,8 @@
<year>2005</year> <year>2005</year>
<year>2010</year>
<holder>Thomas M. Eastep</holder> <holder>Thomas M. Eastep</holder>
</copyright> </copyright>
@ -85,8 +87,8 @@
<para>Specify the <quote>dhcp</quote> option for this interface in the <para>Specify the <quote>dhcp</quote> option for this interface in the
<ulink <ulink
url="manpages/shorewall-interfaces.html"><filename>/etc/shorewall/interfaces</filename></ulink> url="manpages/shorewall-interfaces.html"><filename>/etc/shorewall/interfaces</filename></ulink>
file. This will generate rules that will allow DHCP to and from file. This will generate rules that will allow DHCP to and from your
your firewall system.</para> firewall system.</para>
</listitem> </listitem>
<listitem> <listitem>
@ -131,8 +133,8 @@
<para>Specify the <quote>dhcp</quote> option for the bridge interface <para>Specify the <quote>dhcp</quote> option for the bridge interface
in the <ulink in the <ulink
url="manpages/shorewall-interfaces.html"><filename>/etc/shorewall/interfaces</filename></ulink> url="manpages/shorewall-interfaces.html"><filename>/etc/shorewall/interfaces</filename></ulink>
file. This will generate rules that will allow DHCP to and from file. This will generate rules that will allow DHCP to and from your
your firewall system as well as through the bridge.</para> firewall system as well as through the bridge.</para>
</listitem> </listitem>
</itemizedlist> </itemizedlist>
</section> </section>
@ -148,6 +150,11 @@
relayed.</para> relayed.</para>
</listitem> </listitem>
<listitem>
<para>Allow UDP ports 67 and 68 ("67:68") from the client zone to the
server zone.</para>
</listitem>
<listitem> <listitem>
<para>If the server is configured with 'ping-check' true, then you <para>If the server is configured with 'ping-check' true, then you
must <ulink url="ping.htm">allow 'ping'</ulink> from the server's zone must <ulink url="ping.htm">allow 'ping'</ulink> from the server's zone