And most importantly remember to firewall off the PPPoE client. If you don't you'll be own3d within hours by a DNS amplification attack.
I have done a quick Google and can't find any info on this exploit. Do you have a link please? Thinking about this in terms of the OSI model, I can't get my head around what you are saying.
I'm hoping someone will send me a complete config which I can study.