(Probably) it's a bug

[Krzysztof Oledzki]

On Thu, 21 Jul 2005, Marek Sirdak wrote:

> Dear Netfilter developers:
>
> I'm using iptables to protect my company network. My Kernel version is
> 2.6.12 and iptables 1.3.2. Today I noticed that iptables cannot control
> broadcast traffic. For example I'm using DHCPd (version 3.0.2).

Hm.. isc-dhcpd uses af_packet:

Symbol: PACKET [=y]
  Prompt: Packet socket
    Defined at net/Kconfig:26
    Depends on: NET
    Location:
      -> Device Drivers
        -> Networking support
          -> Networking support (NET [=y])
            -> Networking options

"The Packet protocol is used by applications which communicate
  directly with network devices without an intermediate network
  protocol implemented in the kernel, e.g. tcpdump.  If you want them
  to work, choose Y.

(...)"

Best regards,

 			Krzysztof Olędzki