iptables in gentoo

[mzet]

I found in /etc/init.d/net that iptables is started before net (before net in depends function), but is this true? I'm using dhcpcd and after checking it's logs I found that dhcpcd has connected with dhcp server even though in my iptables rules i'm blocking incomming broadcast traffic.

[magic919]

The traffic from the DHCP will be unicast, surely.

[mzet]

Yeah, You are right it's unicast, only boot state is broadcast (DHCPDISCOVER and DHCPOFFER). My mistake. But even when I'm blocking all the incoming traffic dhcpcd successfully comunicates with dhcp server. Conclusion: firewall doesn't work when it happens.

[magic919]

When you say blocking all incoming traffic, do you mean ALL? You don't have an accept related, established rule that would let the packets through?

[mzet]

Yup, for testing purposes I commented out all my input rules and set policy to drop.

[AllenJB]