Good Day,

I'm hoping the solution to this is one of those embarassingly obvious ones.

I created a role for copyright violators and allow all IP traffic to a DNS 
server, a DHCP server and a web server with a message regarding their 
violation. I then created a filter of the violators MAC and assign them to 
the copyright role.

I tested it on the same subnet as the DHCP server and everything was fine. 
However, it is not possible to obtain or renew an address across a router. 

Without filtering DHCP is OK.

Thanks,

Bill Doyle