Comment by clivedup

I hadn't thought of this!

Client isolation would help, but it also breaks some devices.

Are there decent daemons that allow me to allowlist which broadcast traffic to permit?

Ideally it'd be compatible with IPv6-only clients on my LAN.