> When I used DHCP with PF, I found that it just worked without any rules > at all. As long as you're allowing packets out with keep state, it may be that it is able to allow the inbound DHCPOFFER after a DHCP REQUEST outbound. The rule I provided may not be necessary, then. Josh