Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I recently installed CSF firewall and have made live a new server which is accepting around 600req/second.

Its basically a reverse proxy and I found in pingdom and munin that for a particular time, the response times of the server increased by 3 folds. I looked into logs and exactly at that point, I found loads of entries like this:

Feb 27 15:22:09 li235-57 dhclient: DHCPREQUEST of <My IP address> on eth0 to port 67
Feb 27 15:22:09 li235-57 dhclient: send_packet: Operation not permitted

Can you help me understand what went wrong and what exactly happened? Is there any settings I should change in CSF or any pointer to debug this further?

share|improve this question

1 Answer 1

up vote 4 down vote accepted

You need allow DHCP requests:

$IPTABLES  -I INPUT -i $LAN_IFACE -p udp --dport 67:68 --sport 67:68 -j ACCEPT

in CSF you can set 67 and 68 in UDP_IN, UDP_OUT and unset DROP_NOLOG(CSF Firewall Configuration)

share|improve this answer
Thanks this worked – Sparsh Gupta Feb 28 '11 at 5:55

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.