> I think it should be: > > OUT : -p udp -m udp --sport 68 --dport 67 -j PVEFW-SET-ACCEPT-MARK; > > IN : -p udp -m udp --sport 67 --dport 68 -j ACCEPT; OK, just added that fix. > (is dhcp option, dhcp client ?) dhcp client.