Shorewall users - Dec 2003 - blacklist and not working dhcp

Return-Path: <viuwier@wp.pl>
X-Original-To: shorewall-announce@lists.shorewall.net
Delivered-To: shorewall-announce@lists.shorewall.net
Received: from smtp.wp.pl (smtp.wp.pl [212.77.101.160])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by lists.shorewall.net (Postfix) with ESMTP id E3D8F33DB3
	for <shorewall-announce@lists.shorewall.net>;
	Thu, 25 Dec 2003 07:17:13 -0800 (PST)
Received: (WP-SMTPD 23728 invoked from network); 25 Dec 2003 15:17:10 -0000
Received: from hades.commedia.pl (HELO MACIEK) (viuwier@[217.96.90.134])
	(envelope-sender <viuwier@wp.pl>) by smtp.wp.pl (wp-smtpd) with SMTP
	for <shorewall-announce@lists.shorewall.net>; 25 Dec 2003 15:17:10 -0000
Date: Thu, 25 Dec 2003 16:17:13 +0100
From: viuwier <viuwier@wp.pl>
Reply-To: viuwier <viuwier@wp.pl>
X-Priority: 3 (Normal)
Message-ID: <350655428.20031225161713@wp.pl>
To: shorewall-announce@lists.shorewall.net
Subject: blacklist and not working dhcp
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-AntiVirus: skaner antywirusowy poczty Wirtualnej Polski S. A.
X-AntiVirus: checked by Vexira MailArmor (version: 2.0.1.7; VAE: 6.23.0.2;
	VDF: 6.23.0.19; host: gateway.shorewall.net)
X-WP-ChangeAV: 0
X-WP-AntySpam-Rezultat: NIE-SPAM

Hello,

      I have added to blcklist 4000 ranges of ips (ipfilter from emule).

In intercafes file:
net     ppp0    217.96.90.242
loc     eth0    255.255.255.0           blacklist,dhcp,maclist

but now my dhcp dont work coretly:( It have started but doesn''t give
any information to computers in my network, but I can in each computer
write IP, gate and mask myself and then it is working correctly.

I thought that balcklist option should be last: dhcp,maclist,blacklist
but also don''t working. Then I thought that it shouldntt be on eth0
interface
but ok ppp0 interface, so i move this option:
net     ppp0    217.96.90.242   blacklist
but my dhcp also doesn''t work.

What is going on ? Where this option should be and why my dhcp doesn''t
work after shorewall restart ?

-- 
Best wishes from Poland
Merry Xmass
Maciek

On Thursday 25 December 2003 07:51 am, 
shorewall-announce-bounces@lists.shorewall.net wrote:
> Hello,
>
>       I have added to blcklist 4000 ranges of ips (ipfilter from emule).
Incredible -- 4000 ranges????!!!
>
> In intercafes file:
> net     ppp0    217.96.90.242
> loc     eth0    255.255.255.0           blacklist,dhcp,maclist
The broadcast address on eth0 is clearly wrong!!!
>
> but now my dhcp dont work coretly:( It have started but doesn''t
give
> any information to computers in my network, but I can in each computer
> write IP, gate and mask myself and then it is working correctly.
I haven''t a clue why you are blacklisting these hosts from your local
network.
Blacklisting works on the *source* address.
>
> I thought that balcklist option should be last: dhcp,maclist,blacklist
> but also don''t working. Then I thought that it shouldntt be on
eth0
> interface but ok ppp0 interface, so i move this option:
> net     ppp0    217.96.90.242   blacklist
> but my dhcp also doesn''t work.
>
> What is going on ? Where this option should be and why my dhcp
doesn''t
> work after shorewall restart ?
Did you leave the ''blacklist'' on eth0? If so, I''m
guessing that you are
blacklisting 0.0.0.0 and/or 255.255.255.255.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net