From owner-freebsd-questions@FreeBSD.ORG Fri Aug 22 09:47:27 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EDFD816A4BF for ; Fri, 22 Aug 2003 09:47:27 -0700 (PDT) Received: from rwcrmhc13.comcast.net (rwcrmhc13.comcast.net [204.127.198.39]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4BEB443FBD for ; Fri, 22 Aug 2003 09:47:27 -0700 (PDT) (envelope-from freebsd-questions-local@be-well.no-ip.com) Received: from be-well.ilk.org (be-well.no-ip.com[66.30.200.37]) by comcast.net (rwcrmhc13) with ESMTP id <2003082215390901500jl4gge>; Fri, 22 Aug 2003 15:39:09 +0000 Received: from be-well.ilk.org (lowellg.ne.client2.attbi.com [66.30.200.37] (may be forged)) by be-well.ilk.org (8.12.9/8.12.9) with ESMTP id h7MFd7Me097268; Fri, 22 Aug 2003 11:39:07 -0400 (EDT) (envelope-from freebsd-questions-local@be-well.no-ip.com) Received: (from lowell@localhost) by be-well.ilk.org (8.12.9/8.12.6/Submit) id h7MFd7bb097265; Fri, 22 Aug 2003 11:39:07 -0400 (EDT) X-Authentication-Warning: be-well.ilk.org: lowell set sender to freebsd-questions-local@be-well.ilk.org using -f Sender: lowell@be-well.no-ip.com To: "Bob Hall" References: <20030821215003.GA1524@kongemord.krig.net> From: Lowell Gilbert Date: 22 Aug 2003 11:39:07 -0400 In-Reply-To: <20030821215003.GA1524@kongemord.krig.net> Message-ID: <44lltlya5g.fsf@be-well.ilk.org> Lines: 35 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: FreeBSD Questions List Subject: Re: dhclient denied X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Aug 2003 16:47:28 -0000 "Bob Hall" writes: > I posted about this a while ago, but I haven't been able to > find the cause. I'm getting the following message: > Aug 21 13:00:03 kongemord dhclient: send_packet: Permission denied > > DHCP seems to work fine; I'm getting and maintaining DHCP leases > properly. But these messages are filling up my messages file and > causing my curiosity to drive me crazy. I initially thought that > my firewall was blocking DHCP packets, but I've tried various ipfw > rule changes, including some suggested here, with no effect. My > current DHCP rules are: > ${fwcmd} add allow udp from any bootps to any bootps keep-state out via > ${oif} > ${fwcmd} add allow udp from any 68 to 255.255.255.255 67 keep-state out > via ${oif} > I know the second line is redundent. I was grasping at straws when I > put it in. They're not redundant. 67 is bootps and 68 is bootpc. Furthermore, not all DHCP messages go out to the IP broadcast address. > Generally, a failed connection attempt generates a message with > the IP address and port at each end. This message doesn't have that, > so that and the failure of firewall changes to end the message make > me think that the blocked packets aren't getting as far as the firewall. > > Does anybody have any idea what is causing this? You don't get IP addresses listed when you don't have one yet. I'd recommend trying something like this for your DHCP support: $fwcmd add pass udp from any to any bootps keep-state out xmit ${oif}