DHCP Snooping Broken

[Dawizman]

DHCP Snooping is broken as far as I can tell.

Clients on any of the DS enabled ports are still able to backfeed DHCP servers onto our network on VLAN 1.

[Julian]

I will look at this Monday, sir; I started trying yesterday afternoon, but I had something with BenchNet and RouterOS6 that made it impossible - Migrated to RouterOS 7 and VRF, got done around 3 AM, but it's running tickety boo and I have the segmentation in place to test this.
Today I'm fried, I need to go spend the day with the wife and kids, haven't seen much of them in the last month or two
Be well, sir!
Edit, little more than a week later:
Okay, slight hiccup while I rebuild my test node; I was physically able to make some similar set of circumstances occur, where an adapter pulled a DHCP assignment from a segmented vlan; It'll be a much cleaner test case with the node up and I'll be able to get my pcaps straight; When i say BenchNet's 'tickety boo' i mean loops, whorls, circles, and such lol
edit edit: in my case it's bridging on an upstream NAT leg, not an actual seg bleed; Still digging but all I have actually confirmed is that I suck at firewalls

[CrackerRiley]

I've found it doesn't apply unless I reboot the switch. Maybe there is another more eloquent solution though...
Forget it with WS3. If enabled on even 1 port, it's seemingly enabled on all ports.