Comment 17 for bug 1501206

Just for the record, this bug is still present in Mitaka.

I'd also like to point out that it occurs on provider networks as well, e.g., if you have a flat/vlan network with a router external from OpenStack (no L3 agent) but let OpenStack run the DHCP service. In that case, the dnsmasq inside the qdhcp network namespace will respond to DNS queries from the entire IPv4/IPv6 address space, and will likely be abused to death for DDoS amplification by the various botnets once they discover its existence.