Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've successfully removed or reconfigured the daemons in my server so they will only listen locally. The daemon I have left is dhclient, which listens on UDP port 68. Is it possible for this daemon to only listen locally or does it necessarily have to open UDP port 68 to the world ? (I use network-manager to configure my wired ethernet network automatically.)

Proto Recv-Q Send-Q Local Address  Foreign Address  State PID/Program name
udp        0      0*              1563/dhclient
share|improve this question
Are you saying that you're not using DHCP, or are you saying that you've set up your connection to use DHCP in Network Manager? dhclient is still the DHCP-client, even though you've set it up in Network Manager. – Kvisle Oct 21 '11 at 20:48
@Kvisle I configured network-manager to use DHCP. – Jane Watson Oct 21 '11 at 20:50
up vote 2 down vote accepted

As long as you need to use DHCP the DHCP client needs to be able to receive DHCP messages from the network (unless you are running a DHCP server on the same machine).

You can use firewall to filter DHCP traffic if you want but it is a little more complicated.

share|improve this answer

As long as you've configured the network interface to use DHCP - yes:

A DHCP-request is sendt with as the source address, and the reply is a broadcast-packet as well. It is necessary to expose udp/68 when this occurs.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.