[backport] reject multicast messages if the group configuration is not matching