Cleaned up ACCEPTs so that DROP policy works properly.
Added DHCP output rule, now with comments