Shorewall users - Nov 2002 - configuring dhcp-relay / Shorewall

In our LAN a Linux-router connects 2 subnets. On this router dhcrelay is
running. 

For several reasons we have to run a firewall on this box. But what is
the right way to configure dhcrelay using Shorewall???

Thanks.

-- 
Ad Koster <lidad@zeelandnet.nl>

> -----Original Message-----
> From: Ad Koster
> Sent: Friday, November 29, 2002 10:59 AM
> Subject: [Shorewall-users] configuring dhcp-relay / Shorewall
> 
> 
> In our LAN a Linux-router connects 2 subnets. On this router 
> dhcrelay is running. 
> 
> For several reasons we have to run a firewall on this box. But what is
> the right way to configure dhcrelay using Shorewall???
Given the following design:

1) DHCP server running in "loc" zone configured to answer dhcp
requests from
both loc (192.168.9.0/24) and dmz (192.168.8.0/24) zones.
2) DHCP clients in both loc and dmz zones.
3) dhcrelay running on firewall configured to forward dhcp requests from dmz
zone to loc zone (192.168.9.3).

Solution: Added the "dhcp" option to the loc (eth1) and dmz (eth2)
shorewall
interface definitions in /etc/shorewall/interfaces.

Steve Cowles