InfraGuard

Port 546 (DHCPv6) — exposure risk

A standard public service — usually fine to expose, but keep it patched and on TLS.

StandardDHCP

What it is

Automatic IP assignment (67·68).

Why it is risky

It rarely needs to be internet-facing; exposure often signals a network misconfiguration.

What to do

Keep it on internal segments and block it on public interfaces.

Is it listening on your server?

Linuxss -ltnp 'sport = :546'

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.