Because you have not permitted udp 67 for dhcp. INPUT and FORWARD can be drop/reject.
You are also mixing upper-lower case names, e.g in network you have GUEST
, while in DHCP guest
. Stick to lower case everywhere.
Finally you allow in firewall guest->wan forwarding only, however there is no default route in the routing table via the wan interface. You need to do Policy Based Routing and you have 3 options:
- mwan3 package
- pbr package
- a set of rules/routes for each internet connection.