diff --git a/files/firewall b/files/firewall
index a1d01b2..e768c05 100755
--- a/files/firewall
+++ b/files/firewall
@@ -41,6 +41,7 @@ case $1 in
         ip6tables -A INPUT -s 2001:67c:1560:8003::c8     -p udp  --sport 123 -j ACCEPT   # ntp
 	ip6tables -A INPUT -s fe80::/10                  -p tcp  --sport 179 -j ACCEPT   # bgp (allow init as well as responding)
 	ip6tables -A INPUT -s fe80::/10                  -p tcp  --dport 179 -j ACCEPT   # bgp (allow init as well as responding)
+	ip6tables -A INPUT -s fe80::/10                  -p udp  --dport 546 -j ACCEPT   # dhcp offers
        ### DROP the rest
         ip6tables -P INPUT DROP