[pkg-dhcp-devel] Bug#886540: isc-dhcp-server: Please modify the example 'dhcpd.conf' to only bind to a specific IP address.

[a.marmodoro at googlemail.com]

Package: isc-dhcp-server
Version: 4.3.5-3
Severity: wishlist

Dear Maintainer,
I'd like to ask for a trivial improvement in the default '/etc/dhcp/dhcpd.conf'
configuration. 

For a more selective deployment of the DHCP service, reducing potential 
attack surface and the chances for network disruptions when leaving the package
installed in i.e. a laptop, it would seem best to provide a default configuration
that only bind 'in.tftpd' to a specific IP address.

This could be accomplished, including in the '/etc/dhcp/dhcpd.conf' file the lines:

[...]
# This statement causes the DHCP server to listen  for  DHCP
# requests  sent  to  the  specified  address,  rather  than
# requests sent to all addresses (0.0.0.0). Please modify as needed.
local-address 192.168.0.1
[...]
 
Thanks for your time,
--
Alberto.

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.10 (SMP w/4 CPU cores)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages isc-dhcp-server depends on:
ii  debconf [debconf-2.0]  1.5.61
ii  debianutils            4.8.1.1
ii  libc6                  2.24-11+deb9u1
ii  libdns-export162       1:9.10.3.dfsg.P4-12.3+deb9u3
ii  libirs-export141       1:9.10.3.dfsg.P4-12.3+deb9u3
ii  libisc-export160       1:9.10.3.dfsg.P4-12.3+deb9u3
ii  lsb-base               9.20161125

Versions of packages isc-dhcp-server recommends:
ii  isc-dhcp-common  4.3.5-3
ii  policycoreutils  2.6-3

Versions of packages isc-dhcp-server suggests:
pn  isc-dhcp-server-ldap  <none>
ii  policykit-1           0.105-18

-- Configuration Files:
/etc/dhcp/dhcpd.conf changed [not included]

-- debconf information:
  isc-dhcp-server/interfaces: