Be sure to check out the following article on MS KB about all the UDP ports forwarded by IP HELPER ADDRESS.....it's not just DHCP. You need to block the other ones explicitly if you don't want them passing through as well.http://support.microsoft.com...