Bootstrap Proticol

Discussion in 'other firewalls' started by MakoFusion, Nov 27, 2003.

Thread Status:
Not open for further replies.
  1. MakoFusion

    MakoFusion Registered Member

    Joined:
    Jun 25, 2003
    Posts:
    130
    Is Bootstrap Proticol for ports 67 and 68 a nessacery thing to have? When would it be needed and why?
     
  2. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    UDP 67 Bootps (server) and UDP 68 Bootpc (client) are required if your system uses a DHCP server to acquire it's IP.

    Typical rules:

    Allow
    Inbound UDP
    Local service: 68
    Local address: Any
    Remote service: 67
    Remote address: Any or could be restricted to your DHCP server(s)

    Allow
    Outbound UDP
    Local service: 67
    Local address: Any
    Remote Service: 68
    Remote address: Any or could be restricted to broadcast (255.255.255.255)

    If you plan on restricting the inbound rule to your DHCP server(s) it is usually best to log the rule for awhile first to determine the number and IP's of those servers. Even though your IP configuration may only show one, sometimes there may be others (ie. my ISP's gateway server).

    If you are behind a router and use fixed IP's for your system(s) on the LAN, these rules would not be required.

    Regards,

    CrazyM
     
Thread Status:
Not open for further replies.