How can I protect my dhcpd application on a Debian system from DHCP starvation attacks? Is there any option in the .conf file?
The layer 2 network should be protected, means that security measure must be in place: dhcp snooping (bind ip:mac in database) dynamic arp inspection (work hand in hand with dhcp snooping) port security - be strict, one mac address per access port if not trunking
By doing this, you can guarantee, when a device is plug into the network that it is unique
Configure DHCP server to only offer ip address to a known set of MAC address