,---- | Apr 6 07:50:33 wally kernel: SuSE-FW-DROP-ANTI-SPOOFING | IN=eth1 OUT= MAC= SRC=64.85.299.299 DST=255.255.255.255 | LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP | SPT=68 DPT=67 LEN=308 `---- I'm not an expert in DHCP at all, but to me it looks like the following happened: when requesting a new lease your system broadcasts and udp packet to discover any present DHCP server. because it is a broadcast, the packet is also received by your system - therefore it ends in the INPUT chain again. what would be interesting to know is whether the packet was also received by another system - did the ip renewal work? cheers, michael