PDA

View Full Version : Jetico block dhcp packages?


gzm55
August 26th, 2006, 12:41 PM
i find jetico blocks all dhcp packages from log, and i copy one item below:

-{ Quote: "2006-08-26 23:52:46 Blocked Block All not Processed Protocol Packets 328 UDP incoming packet 10.42.0.1 255.255.255.255 67 68 TTL: 255; TOS: 0; ID: 14AB
" }-

even i create a rule from this item, jetico blocks these udp packages yet. how can i allow these udp packages?

ps: i'm using jetico 2.0.0.6 beta.

Tommy
August 26th, 2006, 02:04 PM
Create following rule:

You have to allow 'svchost.exe' or 'services' (depending on your OS) to connect on the DHCP ports.

Aplication: svchost.exe (services)
Protocoll: TCP/IP
Event: receive datagram, send datagram
Local port: 68
Remote port: 67

Leave the remote adress empty.

That's it.

Stem
August 26th, 2006, 02:32 PM
-{ Quote: "i find jetico blocks all dhcp packages from log, and i copy one item below:
2006-08-26 23:52:46 Blocked Block All not Processed Protocol Packets 328 UDP incoming packet 10.42.0.1 255.255.255.255 67 68 TTL: 255; TOS: 0; ID: 14AB" }-The IP shown is a private class A address, are you behind a router or on a large private networK?
What O.S. are you using, (as the rule could be for either svchost.exe or services.exe)

gzm55
August 27th, 2006, 12:41 AM
-{ Quote: "The IP shown is a private class A address, are you behind a router or on a large private networK?
What O.S. are you using, (as the rule could be for either svchost.exe or services.exe)" }-

Yes, I'm on a large private network, using WinXP SP2, and i have created the rule as Tommy said in "Network Activity" table.

But the package is also blocked in IP Table by the rule "Block All not Processed Protocol Packets".

Stem
August 27th, 2006, 07:13 AM
Hi gzm55,
This may be broadcasts from other PC`s on your network,.. lets check.
Go to windows "start"-> select "run". In the windows that appears type "cmd" (without the ""), a command window will appear, at the command prompt type "ipconfig /all" (without the "", and leave a gap between the g and /), you will then see a list of information, which will include your DHCP server IP,... is this server IP 10.42.0.1 ?

gzm55
August 28th, 2006, 03:16 AM
-{ Quote: "Hi gzm55,
This may be broadcasts from other PC`s on your network,.. lets check.
Go to windows "start"-> select "run". In the windows that appears type "cmd" (without the ""), a command window will appear, at the command prompt type "ipconfig /all" (without the "", and leave a gap between the g and /), you will then see a list of information, which will include your DHCP server IP,... is this server IP 10.42.0.1 ?" }-

Yes, the server IP is 10.42.0.1

Stem
August 28th, 2006, 06:29 AM
-{ Quote: "Yes, the server IP is 10.42.0.1" }-Is the blocking of these broadcasts giving you connection problems?
I can find time later to set up Jetico2 to check on this.

gzm55
August 28th, 2006, 10:08 AM
-{ Quote: "Is the blocking of these broadcasts giving you connection problems?
I can find time later to set up Jetico2 to check on this." }-

my connection is ok, i can use opera, msn, emule, ect as usual.

But I also notice that the ip addr of my pc remain the same since jetico was installed. I don't remember whether i had another ip addr before jetico's install.

Stem
August 30th, 2006, 02:17 AM
-{ Quote: "my connection is ok, i can use opera, msn, emule, ect as usual.

But I also notice that the ip addr of my pc remain the same since jetico was installed. I don't remember whether i had another ip addr before jetico's install." }-Sorry for delay in reply,...

Can you install the latest version, and re-check this DHCP broadcast problem.
We will also need to check what LAN is being placed into the trusted zone.
(you do not want the full private network 10.0.0.0/255.0.0.0 being picked up as trusted)

gzm55
September 1st, 2006, 03:44 AM
after updating to 2.0.0.7 beta, the rule works.

thx for reply^^