587b0516cd
The relay models the physical LAN as the gateway port, not as another remote client. Client-originated unknown unicast now forwards only to the gateway, and gateway-originated unknown unicast is dropped unless it resolves to a registered remote client. Broadcast and multicast fanout is unchanged. This prevents promiscuous gateway capture of unrelated LAN unicast from being flooded to every remote client. It also keeps client-to-LAN traffic from needlessly leaking to other clients in the room. Test Plan: - cargo fmt --check - cargo test -p lanparty-relay - cargo test --workspace - cargo clippy --workspace --all-targets -- -D warnings - git diff --check Refs: PLAN.md