DHCP Server disable script

My clients (SXT’s) are usually installed in bridge mode. My clients routers (personal) are configured to login to my network via PPPoE. Occassionally, one of my customers will plug the SXT into their LAN port and their router will begin issuing DHCP on my network.

I need a script that will disable or remove ethernet1 from the bridge if it detects a DHCP server on ethernet1. Additionally, it would be nice if on reboot, the SXT would check for DHCP server on ethernet1 and if it isn’t there would add ethernet 1 to the bridge port.

My client radios receive their IP from the core router via dhcp in the 10.0.0.0/21 scheme.

Also, it should send out an email to notify me which client is having the problem.

Why not just block DHCP from passing through the SXT?

My SXTs are setup in bridge mode and my clients authenticate with their routers using PPPoE. What is the best configuration to prevent DHCP from going out the SXT? Thank you for your help.

enable IP fireless on the bridge, then block ports 67-68 on the forward chain.