Networking
Risk: Medium

Port 67 β€” DHCP Server (Bootstrap Protocol)

Port 67 is used by DHCP (Dynamic Host Configuration Protocol) servers to receive broadcast lease requests from client devices seeking IP configuration on local subnets.

PORT NUMBER

67

PROTOCOL

UDP

DEFAULT PROCESS

dhcpd, dnsmasq, isc-dhcp-server

FIREWALL TARGET

67/udp

Instant Terminal Fixes for Port 67

macOS & Linux Terminal
1. Check who is listening on port 67:
sudo ss -ulpn | grep ":67 "
2. Kill process occupying port 67 (EADDRINUSE fix):
sudo systemctl stop isc-dhcp-server || sudo killall dhcpd
3. UFW Firewall Allow rule:
sudo ufw allow 67/udp
Windows PowerShell (Admin)
1. Check listening port:
Get-NetUDPEndpoint -LocalPort 67
2. Force kill process on port 67:
Stop-Service DHCPServer -Force
3. Docker Port Forwarding Mapping:
docker run -d --net=host -v /etc/dhcp:/data networkboot/dhcpd eth0

Common Error Encountered

dhcpd: Address already in use or interface not configured for DHCP broadcasts.

Security Advisory & Hardening

Rogue DHCP servers on an untrusted local network can assign malicious DNS resolvers and default gateways, leading to Man-in-the-Middle (MitM) attacks. Implement DHCP snooping on network switches.

Frequently Asked Questions

Port 67 Questions & Answers

Common questions regarding default services, kill commands, and firewall configurations.

Port 67 is commonly used for DHCP Server (Bootstrap Protocol). Port 67 is used by DHCP (Dynamic Host Configuration Protocol) servers to receive broadcast lease requests from client devices seeking IP configuration on local subnets.