From owner-freebsd-questions@FreeBSD.ORG  Sun May 23 14:35:36 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4129A16A4CE
	for <freebsd-questions@freebsd.org>;
	Sun, 23 May 2004 14:35:36 -0700 (PDT)
Received: from auk2.snu.ac.kr (auk2.snu.ac.kr [147.46.100.32])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E169743D39
	for <freebsd-questions@freebsd.org>;
	Sun, 23 May 2004 14:35:35 -0700 (PDT)
	(envelope-from stopspam@users.sourceforge.net)
Received: from [147.46.44.181] (stopspam@users.sourceforge.net) by 
          auk2.snu.ac.kr (Terrace Internet Messaging Server) 
          with ESMTP id 2004052406:17:34:253326.13435.2875956144
          for <kline@thought.org>; 
          Mon, 24 May 2004 06:17:34 +0900 (KST) 
Message-ID: <40B11902.8070801@users.sourceforge.net>
Date: Mon, 24 May 2004 06:34:58 +0900
From: Rob <stopspam@users.sourceforge.net>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.6) Gecko/20040507
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Gary Kline <kline@thought.org>, freebsd-questions@freebsd.org
References: <20040523192644.GA46148@tao.thought.org>
In-Reply-To: <20040523192644.GA46148@tao.thought.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-TERRACE-SPAMMARK: NO       (SR:5.76)                     
  (by Terrace)                                                   
Subject: Re: dhcp "dhcpd_ifaces" question.
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 23 May 2004 21:35:36 -0000

Gary Kline wrote:
> 	To any network wizards on-list,
> 
> 	I'm just tidying up dhcp and namedb files and would like
> 	to know what strings to put after this:
> 
> 	dhcpd_ifaces=                           # ethernet interface(s)
> 
> 	I'm assuming it should be "dc0 dc1" but would like to make
> 	sure.  If it would be just as well to leave it blank and
> 	let dhcpd figure it out, please advise.  (In my old config
> 	file $IFACES wasn't defined.)

I have dhcpd configured; I'm not using named, so I don't know about that.

As far as I know, you can use dhcpd_ifaces to limit the DHCP service to only
one interface (provided you have more than one interface on your system).

I have rl0 and rl1, where rl0 is on the out-side internet, and rl1 on the
internal network (with IP 10.0.0.1). I only want DHCP server for internal
network: I therefore have in /etc/rc.conf:

   dhcpd_ifaces="rl1"

However, when you look at netstat output, dhcpd is still listening to all
interfaces, which may have some security risks. To further limit this, you
probably need a extra global line in /usr/local/etc/dhcpd.conf :

   local-address 10.0.0.1;

Then you get a netstat output like this:

   udp4       0      0  10.0.0.1.bootps        *.*

Regards,
Rob.