maybe I was not clear enough, sorry. My main concern is NOT ALLOWING serving DHCP requests from machines outside the node.
Your proposal, if I understood correctly, doesn't work because DHCP request don't have any IP (obviously, because the reason of a DHCP request is to get an IP). So, I can...