up vote 0 down vote favorite
share [g+] share [fb]

I've successfully removed or reconfigured the daemons in my server so they will only listen locally. The daemon I have left is dhclient, which listens on UDP port 68. Is it possible for this daemon to only listen locally or does it necessarily have to open UDP port 68 to the world ? (I use network-manager to configure my wired ethernet network automatically.)

Proto Recv-Q Send-Q Local Address  Foreign Address  State PID/Program name
udp        0      0 0.0.0.0:68     0.0.0.0:*              1563/dhclient
link|improve this question
Are you saying that you're not using DHCP, or are you saying that you've set up your connection to use DHCP in Network Manager? dhclient is still the DHCP-client, even though you've set it up in Network Manager. – Kvisle Oct 21 '11 at 20:48
@Kvisle I configured network-manager to use DHCP. – Jane Watson Oct 21 '11 at 20:50
feedback

2 Answers

up vote 0 down vote accepted

As long as you need to use DHCP the DHCP client needs to be able to receive DHCP messages from the network (unless you are running a DHCP server on the same machine).

You can use firewall to filter DHCP traffic if you want but it is a little more complicated.

link|improve this answer
feedback
up vote 1 down vote

As long as you've configured the network interface to use DHCP - yes:

A DHCP-request is sendt with 0.0.0.0 as the source address, and the reply is a broadcast-packet as well. It is necessary to expose udp/68 when this occurs.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.