{
    if ($ExternalDHCP eq "on")
    #DHCP CLIENT ALLOW  - I'm not sure that we need this, since it
    # could be covered by connection tracking.
    {
        $OUT .= <<'HERE';
    /sbin/iptables --append INPUT -p udp --dport 67:68 -i ${OUTERIF:-$INTERNALIF} -j ACCEPT
HERE
    }
}
