search

freifunkh / ansible-configs

Here we store all of our actual ansible hosts in freifunk hanover
2 stars 1 forks source link

dhcp: Operation not permitted / Failed to send 300 byte long packet over fallback interface. #28

Closed 1977er closed 6 years ago

1977er commented 7 years ago

Occasionally we have the following log entries: dhcpd[14275]: send_packet: Operation not permitted dhcpd[14275]: dhcp.c:3652: Failed to send 300 byte long packet over fallback interface.

According to http://www.linuxquestions.org/questions/linux-networking-3/dhcpd-complains-failed-to-send-300-byte-long-packet-over-fallback-interface-4175548986/ the reason for that is are too restrictive firewall rules, especially the outgoing rules.

I'd like to add iptables -A OUTPUT -p udp --sport 1024:65535 --dport 67 -j ACCEPT iptables -A OUTPUT -p udp --sport 68 --dport 67 -j ACCEPT but unfortunately simple_firewall does not support the configuration for the OUTPUT chain.