dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

dch-gw: Allow outbound DHCP 

Connection Tracking does not work for DHCP messages, since many are
broadcast. As such, the firewall must explicitly allow datagrams
destined for the DHCP client port.
jenkins-master
Dustin 2018-04-07 09:39:22 -05:00
parent de5aa114d1
commit ef2b31880b
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
group_vars/dch-gw/dch-network.yml
View File

@ -100,6 +100,8 @@ allow_outgoing:
port: dhcpv6-server port: dhcpv6-server
- protocol: udp - protocol: udp
port: bootps port: bootps
- protocol: udp
port: bootpc
- protocol: tcp - protocol: tcp
port: https port: https
- protocol: tcp - protocol: tcp