PDA

View Full Version : Bootstrap Proticol


MakoFusion
November 27th, 2003, 08:26 PM
Is Bootstrap Proticol for ports 67 and 68 a nessacery thing to have? When would it be needed and why?

CrazyM
November 28th, 2003, 02:35 AM
UDP 67 Bootps (server) and UDP 68 Bootpc (client) are required if your system uses a DHCP server to acquire it's IP.

Typical rules:

Allow
Inbound UDP
Local service: 68
Local address: Any
Remote service: 67
Remote address: Any or could be restricted to your DHCP server(s)

Allow
Outbound UDP
Local service: 67
Local address: Any
Remote Service: 68
Remote address: Any or could be restricted to broadcast (255.255.255.255)

If you plan on restricting the inbound rule to your DHCP server(s) it is usually best to log the rule for awhile first to determine the number and IP's of those servers. Even though your IP configuration may only show one, sometimes there may be others (ie. my ISP's gateway server).

If you are behind a router and use fixed IP's for your system(s) on the LAN, these rules would not be required.

Regards,

CrazyM