Allow unicast DHCP responses from (sub)bosses

4be2d7b7 · Ryan Jackson · 7c2c6558 · 4be2d7b7
Commit 4be2d7b7 authored Jan 20, 2012 by Ryan Jackson
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

firewall/iptables-fw-rules firewall/iptables-fw-rules +1 -0

No files found.
--- a/firewall/iptables-fw-rules
+++ b/firewall/iptables-fw-rules
@@ -308,6 +308,7 @@ iptables -A INPUT -p udp --dport 1434 -j DROP # BASIC,CLOSED,ELABINELAB+WINDOWS
 # replies may be broadcast or unicast
 iptables -A INSIDE -p udp --sport 68 -d 255.255.255.255 --dport 67 -j ACCEPT # BASIC,CLOSED,ELABINELAB
 iptables -A OUTSIDE -p udp --sport 67 --dport 68 -d 255.255.255.255 -j ACCEPT # BASIC,CLOSED,ELABINELAB
+iptables -A OUTSIDE -p udp --sport 67 -s EMULAB_BOSSES -d EMULAB_CNET -j ACCEPT # BASIC,CLOSED,ELABINELAB

 #
 # TFTP with boss or ops