| Author |
Message |
astro
Joined: 03 Feb 2005
Posts: 18
|
| Posted: Tue Oct 18, 2005 9:40 pm Post subject: securing dhcpcd |
|
|
| Is there any way to secure dhcpcd, such as with iptables? If so, what would that rule look like? |
|
| Back to top |
|
vodka
Joined: 21 Jun 2005
Posts: 9
|
| Posted: Wed Oct 19, 2005 11:25 am Post subject: |
|
|
| Exactly what do you mean by 'securing' dhcpcd? Dhcpcd doesn't open any ports, so all you can do with iptables is block dhcp requests made by dhcpcd, which will make it useless. |
|
| Back to top |
|
astro
Joined: 03 Feb 2005
Posts: 18
|
| Posted: Wed Oct 19, 2005 12:00 pm Post subject: |
|
|
OK, so you are saying that it's safe how it is? netstat says it is on 0.0.0.0:68, but it's not in the LISTEN state.
I had read this: http://www.gentoo.org/security/en/glsa/glsa-200507-16.xml
but I guess that means that the dhcp server would have to be comprimised, and like you said, if you blocked access to that then dhcpcd would be useless.
This is a bit new to me. I'm just trying to make sure that I've closed any holes.
Thanks.
-austin |
|
| Back to top |
|
vodka
Joined: 21 Jun 2005
Posts: 9
|
| Posted: Wed Oct 19, 2005 12:58 pm Post subject: |
|
|
well, if you distrust dhcpcd, you can aways configure your ip adress manually. I don't know what distro you use, but in gentoo, you edit /etc/conf.d/net.example apropriately and save it to /etc/conf.d/net
The example file explains how it works. No more dhcpcd, one worry less :). |
|
| Back to top |
|
| |
