20.7 - DHCP on WAN blocked

[patman]

Hi!

I have enabled DHCP on my WAN interface as my ISP uses dynamic addresses. Unfortunately my log (System->Log Files->General) is full of message like this:

2020-10-31T09:23:43   dhclient[12069]   send_packet: Permission denied
2020-10-31T09:23:43   dhclient[12069]   DHCPREQUEST on vtnet3 to 172.16.100.153 port 67

One issue is that the DHCP firewall rule goes after the "block private networks" which I can simply disable, but then I run into the next problem I have no idea how to solve: the automatic DHCP rules are NOT marked as "first match" which causes one of the subsequent Firehol rules to drop the packet (in my opinion).

So my question, why are they not marked as "last match"? I only see this on my WAN interface not on any others? How to I change that or fix my issue that the DHCP is using a private IP address on a public interface?
Do I need to duplicate the automatic rules? Does not sound like a nice solution.

Thanks,
Patrick