DHCP no-route

Jeremy Baggs j_baggs at comcast.net
Tue Feb 13 06:45:11 UTC 2007


Hello all,

I have a FreeBSD /pf firewall setup between my network and the outside
world.
The firewall box gets an IP address from my ISP through DHCP.
When a lease expires, my firewall successfully obtains a new address
from one server
at my ISP.  There is however a second server that comes into play when I
issue a request
using dhclient.  This second server gets blocked by the rule: 

block drop log quick from no-route to any

I can ping both servers.

I could add a pass rule for the second server but am wondering under
what conditions a server
would behave like this in the first place. Any thoughts?



Jeremy




More information about the freebsd-pf mailing list