[Kea-users] Duplicate Addresses, address pool exhaustion with DHCPDECLINE flood

Tomek Mrugalski tomasz at isc.org
Tue Apr 23 13:09:10 UTC 2019


On 23.04.2019 07:59, attila.domjan.hu at gmail.com wrote:
> I will disable in kea the decline feature too. In our FTTH access
> network IP conflict never ever can happen, because of the dhcp snooping
> based ip- and arp anti spoofing, so it is just a vulnerability. I suggest, the dhcpdecline feature should be disable via configuration option.
That's a great justification! Thanks for sharing. Can I ask you to go to
gitlab.isc.org/isc-projects/kea and open up a feature request for this?

Thanks,
Tomek


More information about the Kea-users mailing list