DMZ and DHCP ????

[Chris]

Hi all: We have setup and DMZ off of our BM39 server. The
only purpose of the DMZ is to allow a few clients relatively
unencumbered internet access. We have had lots of problems
with our BM proxy interfering with secure Citrix implemented
by some partner we work with (Hospitals).

We also have visiting review staff from Drug companies as we
do many drug studies. These visitors often need internet
access and up to this point I have been placing them on our
internal subnet. But I am rethinking this and am
considering moving our visitors to the DMZ instead.

To do this I want to setup a DHCP server on our BM server
(Done) to serve up addresses for the DMZ. However during
testing the clients are not seeing the DHCP server. I
suspect this is a filtering issue. I currently only have
one set of filters for the DMZ which allows all traffic from
the public interface to the DMZ and back.

I am assuming the DHCP server needs a filter to allow
traffic but I have no idea what that would look like. Can
you help me out? Thanks, Chris.

[Chris]

OK, got this working suing Craig's filter book _ glad to
have purchased it.

>>> On 9/21/2009 at 11:05 AM, in message
<4AB75DE5.CE15.0032.0@N0_$pam.vrapc.com>,

[Craig Johnson]

In article <4AB77358.CE15.0032.0@N0_$pam.vrapc.com>, Chris wrote:
> OK, got this working suing Craig's filter book _ glad to
> have purchased it.
>

Thanks!

As a side note, I once tried for an hour to get DHCP relay working
through filtering, and failed. There is something about the filtering
that blocks the relay from working, in spite of any filter exceptions.
(Probably along the lines of cluster heartbeat, except the fix there
didn't help with DHCP relay). DHCP server on the BM server itself is
OK with proper filter exceptions.

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***