<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="FeedCreator 1.8" -->
<?xml-stylesheet href="https://www.2mbit.com/lib/exe/css.php?s=feed" type="text/css"?>
<rss version="2.0">
    <channel xmlns:g="http://base.google.com/ns/1.0">
        <title>The Summit Open Source Development Group - software:srfirewall:snippets</title>
        <description></description>
        <link>https://www.2mbit.com/</link>
        <lastBuildDate>Sun, 05 Apr 2026 13:28:42 +0000</lastBuildDate>
        <generator>FeedCreator 1.8</generator>
        <image>
            <url>https://www.2mbit.com/_media/wiki/dokuwiki.svg</url>
            <title>The Summit Open Source Development Group</title>
            <link>https://www.2mbit.com/</link>
        </image>
        <item>
            <title>Allow DHCP and DHCPv6</title>
            <link>https://www.2mbit.com/software/srfirewall/snippets/dhcp?rev=1412638669&amp;do=diff</link>
            <description>Allow DHCP and DHCPv6

Normally, when you set the default INPUT policy to DROP, it breaks DHCP/DHCPv6 unless you put in a proper allow.

Configuration

Config: etc/srfirewall/ipv4/acl.conf


#&lt;direction&gt; &lt;action&gt; &lt;interface&gt; &lt;src&gt; &lt;srcport&gt; &lt;dst&gt; &lt;dstport&gt; &lt;protocol&gt; &lt;syn&gt; &lt;state&gt;
IN ACCEPT eth1 - 67:68 - 67:68 udp - NEW</description>
            <author>anonymous@undisclosed.example.com (Anonymous)</author>
            <pubDate>Mon, 06 Oct 2014 23:37:49 +0000</pubDate>
        </item>
    </channel>
</rss>
