From 341617b5b8059c1db8c992ce2bfb04a4ffa86536 Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Tue, 12 Jan 2010 07:55:58 -0800
Subject: [PATCH] Update DHCP document for forwarding.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
---
 docs/dhcp.xml | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/docs/dhcp.xml b/docs/dhcp.xml
index e5ae7ee5f..8f69397f0 100644
--- a/docs/dhcp.xml
+++ b/docs/dhcp.xml
@@ -26,6 +26,8 @@
 
       <year>2005</year>
 
+      <year>2010</year>
+
       <holder>Thomas M. Eastep</holder>
     </copyright>
 
@@ -85,8 +87,8 @@
         <para>Specify the <quote>dhcp</quote> option for this interface in the
         <ulink
         url="manpages/shorewall-interfaces.html"><filename>/etc/shorewall/interfaces</filename></ulink>
-        file. This will generate rules that will allow DHCP to and from
-        your firewall system.</para>
+        file. This will generate rules that will allow DHCP to and from your
+        firewall system.</para>
       </listitem>
 
       <listitem>
@@ -131,8 +133,8 @@
         <para>Specify the <quote>dhcp</quote> option for the bridge interface
         in the <ulink
         url="manpages/shorewall-interfaces.html"><filename>/etc/shorewall/interfaces</filename></ulink>
-        file. This will generate rules that will allow DHCP to and from
-        your firewall system as well as through the bridge.</para>
+        file. This will generate rules that will allow DHCP to and from your
+        firewall system as well as through the bridge.</para>
       </listitem>
     </itemizedlist>
   </section>
@@ -148,6 +150,11 @@
         relayed.</para>
       </listitem>
 
+      <listitem>
+        <para>Allow UDP ports 67 and 68 ("67:68") from the client zone to the
+        server zone.</para>
+      </listitem>
+
       <listitem>
         <para>If the server is configured with 'ping-check' true, then you
         must <ulink url="ping.htm">allow 'ping'</ulink> from the server's zone