> Source: [sk117600](https://support.checkpoint.com/results/sk/sk117600)

# sk117600 - DHCP Offer packets are dropped on "Accept" rule

| Property | Value |
|----------|-------|
| Solution ID | sk117600 |
| Date Created | 2017-05-30 |
| Last Modified | 2025-10-11 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82, R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * Hosts on the network are not able to obtain IP address from a DHCP server through Security Gateway / Cluster configured as DHCP Relay.

* SmartLog / SmartView Tracker logs show that DHCP Offer packets are dropped by Security Gateway / Cluster on the rule that allows DHCP Request packets.

  *Example* :  
  [![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk117600/drop.png)](https://sc1.checkpoint.com/sc/SolutionsStatics/sk117600/drop.png "Click the image to see it in full size in a new tab/window")
* Kernel debug ('`fw ctl debug -m fw + drop `') on Security Gateway / Cluster member shows that DHCP Offer packets sent from DHCP Relay are dropped by the service handler:

  `;fw_conn_post_inspect: handler function returned action DROP;`  
  `
  ;fw_log_drop_ex: Packet proto=17 `*IP_Address_of_DHCP_Relay*`:67 -> 255.255.255.255:68 dropped by fw_conn_post_inspect Reason: Handler 'dhcp_request_code' drop;`
* This Security Gateway / Cluster R77.20, R77.30, R80.10 is managed by the R80.X Management Server.

## Cause

DHCP packets are not matched correctly because:

* The Default Settings of the '`dhcp-request`' service have been overridden, but not configured:

  "`Override default settings`" option was selected, but nothing was configured in the "`Match`" field. ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk117600/dhcp-request_override_default_settings.png)
* The Default Settings of the '`dhcp-reply`' service have been overridden, but not configured:

  "`Override default settings`" option was selected, but nothing was configured in the "`Match`" field. ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk117600/dhcp-reply_override_default_settings.png)

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content