Limit DHCP requests with iptables - problem: Router

Alex Bligh alex at
Mon Feb 7 10:45:15 UTC 2011

--On 7 February 2011 10:52:58 +0100 Jürgen Dietl 
<juergen.dietl at> wrote:

> Is there a possibility in iptables to read the dhcp-header for the mac
> address and put THIS mac-address in the rule for traffic limitation?

Theoretically. See (e.g.) the iptables "u32" option which can examine
arbitrary 32 bits words within the packets.

You might, however, find it easier to patch dchpd to do a token leaky
bucket rate limit.

Alex Bligh

More information about the dhcp-users mailing list