[Fwbuilder-discussion] Allowing DHCP

[Dick M. <di...@fo...>]

Hi,

	I've got a rule:

   src=0.0.0.0 dst=255.255.255.255 srv=67,68 i/f=all dir=both act=accept

It only generates a rule for INPUT.  This is true for both "fw part of any" or 
not.

IPTABLES -A INPUT -p udp -m udp  -m multiport  -s 0.0.0.0   -d 255.255.255.255 
   --dports 68,67  -m state --state NEW  -j ACCEPT

If I set dir to Outbound rule is put in FORWARD.  This works for me; I'm 
trying to pass DHCP from vpn tunnel to network i/f.

IPTABLES -A FORWARD  -o +  -p udp -m udp  -m multiport  -s 0.0.0.0   -d 
255.255.255.255   --dports 68,67  -m state --state NEW  -j ACC
EPT

But I don't understand.  What's the logic of this?

fwb= v3.0.7

Dick