Subject: Re: dhcpd(8) _cannot_ be completely disabled on an interface
To: Jim Wise <jwise@draga.com>
From: Perry E. Metzger <perry@wasabisystems.com>
List: tech-security
Date: 01/07/2002 00:00:56
Jim Wise <jwise@draga.com> writes:
> The problem is, unlike the other udp ports which dhcpd(8) uses (67,
> 111), dhcpd does _not_ listen on port 68.  It appears that it is using
> bpf to snatch packets directly from the wire.

Why does it need to do that, anyway? Is there a good reason for it?
My suspicion is that it is done only so it can get the MAC address of the
requester or some such, and there should reasonably be a better way to
deliver such information to an application.

Perry
--
Perry E. Metzger		perry@wasabisystems.com
--
NetBSD Development, Support & CDs. http://www.wasabisystems.com/