[Kea-users] ignoring DHCP-Requests which have set the BROADCAST flag

[Francis Dupont]

Stefan Berger writes:
> is it possible to drop or ignore DHCP-Requests from clients which have set th
> e BROADCAST-Flag? (0x8000)

=> I can see at least two easy ways: use a firewall (the flag is at a fixed
offset so trivial to find) or write a hook for Kea (install it at the
pkt4_receive callout point and return DROP when the query4->getFlags()
has FLAG_BROADCAST_MASK set). As the broadcast flag has a function
in the protocol perhaps it is possible to tweak the configuration
so they failed to be served (e.g. responses do not reach them) but
a direct way is more reliable.

Regards

Francis Dupont <fdupont at isc.org>