A TCP dump reveals, that the Dhcp server very often /allways replies to the client on port 67 when a proxy is involved. I need to get my head around this. Port 67 should be used by the server and port 68 by the client. Why do we reply to the client on port 67 when a proxy is involved?
About why dhcp server always replies using port 67, as fas as i know that this port is used by the server to receive and reply the dhcp packets from clients although there is dhcp relay in the middle. and port 68 is used by the client to receive and sent dhcp packet.
Yes talking about Proxy i mean the router between the Dhcp server and the client.
You are right about the ports, 68 used by clients 67 used by (open at) server. Hence im currious why i see server responding to clients on port 67 (like expecting them - or maybe the proxy having an open service on port 67), actualized by firewall rules.
Relay agents should use port 67 as the source port number. Relay agents always listen on port 67, but port 68 has sometimes been used as the source port number probably becuase it was copied from the source port of the incoming packet.
