Hi I think you will need to allow the communication to the DHCP server first then you can use mangle to add the required IP to dynamic address list then you can create firewall rule to allow the dynamic address list and drop everything else also you have the option to execute script when you renew/d...