<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="ContentPasted0">We are using ip6tables for dropping all traffic coming from ff02::1:2.</span></div>
<div class="elementToProof"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="ContentPasted0">Cheers,
<div>Veronique</div>
</span></div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Kea-users <kea-users-bounces@lists.isc.org> on behalf of Frey, Rick E via Kea-users <kea-users@lists.isc.org><br>
<b>Sent:</b> Wednesday, January 4, 2023 5:02 PM<br>
<b>To:</b> s k <sat98@hotmail.com>; kea-users <kea-users@lists.isc.org><br>
<b>Subject:</b> Re: [Kea-users] Disable multicast Listening</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.x_MsoHyperlink
{color:#0563C1;
text-decoration:underline}
span.x_elementtoproof
{}
span.x_EmailStyle21
{font-family:"Calibri",sans-serif;
color:windowtext}
.x_MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
-->
</style>
<div lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="x_WordSection1">
<p class="x_MsoNormal">Realized you’re likely asking about DHCPv6 since mentioning “multicast” address. Kea docs indicate that even when unicast address specified for dhcp6, the server will still listen on multicast address.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Guessing you have already tried blocking the multicast traffic via server firewall (ip6tables/nftables)?</p>
<p class="x_MsoNormal"> </p>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt; color:black">From:
</span></b><span style="font-size:12.0pt; color:black">Kea-users <kea-users-bounces@lists.isc.org> on behalf of Frey, Rick E via Kea-users <kea-users@lists.isc.org><br>
<b>Date: </b>Wednesday, January 4, 2023 at 9:46 AM<br>
<b>To: </b>s k <sat98@hotmail.com>, kea-users <kea-users@lists.isc.org><br>
<b>Subject: </b>Re: [Kea-users] Disable multicast Listening</span></p>
</div>
<div style="border:solid #9C6500 1.0pt; padding:2.0pt 2.0pt 2.0pt 2.0pt">
<p class="x_MsoNormal" style="line-height:12.0pt; background:#FFEB9C"><b><span style="font-size:10.0pt; color:#9C6500">CAUTION:</span></b><span style="font-size:10.0pt; color:black"> This email originated from outside of the organization. Do not click links
or open attachments unless you recognize the sender and know the content is safe.</span></p>
</div>
<p class="x_MsoNormal"> </p>
<div>
<p class="x_MsoNormal">Have you tried setting the “dhcp-socket-type” to “udp”?<br>
<br>
<br>
</p>
<p class="x_MsoNormal">Docs indicate that if not specified, the default is “raw”. If you’re only needing DHCP on unicast (via relay), you should be able to set to “udp” which should disable reception of broadcast packets from directly connected clients.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">See <a href="https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fkea.readthedocs.io%2Fen%2Fkea-2.2.0%2Farm%2Fdhcp4-srv.html%23interface-configuration&data=05%7C01%7Crick.frey%40windstream.com%7Cc6b0ce4a0f5541a58ac608daee6a8360%7C2567b4c1b0ed40f5aee358d7c5f3e2b2%7C0%7C0%7C638084439667774117%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=fNiS%2BAThL93u%2Bq27py%2F75qyeUQPNnu6CJS7DFYZ4vFo%3D&reserved=0">
https://kea.readthedocs.io/en/kea-2.2.0/arm/dhcp4-srv.html#interface-configuration</a></p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"> </p>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt; color:black">From:
</span></b><span style="font-size:12.0pt; color:black">Kea-users <kea-users-bounces@lists.isc.org> on behalf of s k <sat98@hotmail.com><br>
<b>Date: </b>Tuesday, January 3, 2023 at 7:05 PM<br>
<b>To: </b>kea-users <kea-users@lists.isc.org><br>
<b>Subject: </b>[Kea-users] Disable multicast Listening</span></p>
</div>
<div style="border:solid #9C6500 1.0pt; padding:2.0pt 2.0pt 2.0pt 2.0pt">
<p class="x_MsoNormal" style="line-height:12.0pt; background:#FFEB9C"><b><span style="font-size:10.0pt; color:#9C6500">CAUTION:</span></b><span style="font-size:10.0pt; color:black"> This email originated from outside of the organization. Do not click links
or open attachments unless you recognize the sender and know the content is safe.</span></p>
</div>
<p class="x_MsoNormal"> </p>
<div>
<div>
<p class="x_MsoNormal"><span class="x_elementtoproof"><span style="font-size:12.0pt; color:black; background:white">Hi </span></span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black; background:white">Is there a way to stop Kea from listening on multicast address , since our set up only uses relay forwarding to request for ip which is point to point. when i enable listening
on global interface by default kea listens on multicast address and the number of requests received over multicast is overwhelming . </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black; background:white">Thanks</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black; background:white">skumar</span></p>
</div>
<div>
<p class="x_MsoNormal"> </p>
</div>
<div>
<p class="x_MsoNormal"> </p>
</div>
</div>
<p class="x_MsoNormal"> </p>
<p style="margin:15.0pt"><span style="font-size:8.0pt; color:black">Sensitivity: Internal</span></p>
</div>
<p class="x_MsoNormal"> </p>
<p style="margin:15.0pt"><span style="font-size:8.0pt; color:black">Sensitivity: Internal</span></p>
</div>
<br>
<p align="Left" style="font-family:Calibri; font-size:8pt; color:#000000; margin:15pt">
Sensitivity: Internal<br>
</p>
</div>
</body>
</html>