Re: Remote Boot

From: Luigi Rizzo (rizzo_at_icir.org)
Date: 10/21/03

  • Next message: Luigi Rizzo: "Re: SACK?" 
    Date: Tue, 21 Oct 2003 12:38:59 -0700
To: Mikel King <mikel.king@ocsny.com>

    On Tue, Oct 21, 2003 at 03:07:32PM -0400, Mikel King wrote:
    > Just curious would it be better to add a rule to allowe 67 & 68 (tcp &
    > udp) in from the dhcp server instead of leaving the box all open?
    > Understand I've never attempted this booting a diskless, but it seems
    > like something worth trying....

    all this happens before you have a chance to install an ipfw configuration
    so what you suggest cannot be done unless you hardwire the rules
    in the kernel (which you can't, at the moment; not that it couldn't
    be done, ipfw2 is quite flexible in this respect, but the
    feature is not implemented now).

            cheers
            luigi

    > Atanu Ghosh wrote:
    >
    > >>From my notes when trying to get diskless booting working:
    > >
    > > We usually have the firewall and dummynet enabled in our configs. The
    > > default is therefore not to allow any packets in or out. This stops
    > > the DHCP packets leaving a diskless kernel. Override this default.
    > >
    > >options IPFIREWALL_DEFAULT_TO_ACCEPT
    > >
    > > Atanu.
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Luigi Rizzo: "Re: SACK?"