dhcp spoofing

[nano]

Hello, I'm using the newest Gargoyle.
When I run dnsmasq (dhcp server) on my workstation, I can make DoS attack, because all clients in network will use my server. What is more, I'm afraid, there is possibility of making MITM attack.

What do you think about making firewall rules to block all dhcp servers other than router's. It's useful to temporarily run secondary server, therefore some customization like checkbox would be great.

[Lantis]

Man in the middle on your local network?
If look at changing your locks before your firewall.

[nworbnhoj]

Man in the middle on your local network?
If look at changing your locks before your firewall.

I use a Guest network for my invited friends who bring devices with unfriendly apps.

[nano]

Ok, guest network is some solution for unknown hosts, but there still might be some misconfiguration in known hosts, that can shut down entire network. It's just silly, to leave it as it is.

[nano]

I don't have a change to test it, so I'm asking. Is this code an solution for the problem?

Code: Select all

# added to  /etc/config/firewall
config rule
        option name 'no-lan-dhcp-offers'
        option src 'lan'
        option dest 'lan'
        option proto 'udp'
        option dest_port '68'
        option target 'REJECT'
        option family 'ipv4'