Glad to help. The reason that you have to enable something to disable it is that you are enabling filtering which is actually another word for blocking in this context.

As to why you deliberately have to disable port 67 and 68 I don't know the answer to that one. Maybe someone else can tell you that but I can tell you how to disable any port with Firestarter. Click on the "Rules" tab next to the "Hits" tab. Select "Blocked Ports". Right click on it & select "New rule" at the top of the list then just enter the port number that you want to block. Click "OK" & it should work.