class firewall::rules::in::dhcp { nftables::rule { 'default_in-dhcp': content => 'udp sport {67, 68} udp dport {67, 68} accept'; } }