diff --git a/Lrp2/etc/shorewall/rules b/Lrp2/etc/shorewall/rules
index a9183d59d..7d4b29efc 100644
--- a/Lrp2/etc/shorewall/rules
+++ b/Lrp2/etc/shorewall/rules
@@ -346,4 +346,6 @@ ACCEPT          fw              net             icmp
 # allow loc to fw tcp/80 for weblet to work
 ACCEPT          loc       fw            udp     53
 ACCEPT          loc       fw            tcp     80
+# uncomment to use dnsmasq's dhcpd in your LAN
+#ACCEPT          loc       fw            udp     67,68
 #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE