I'm just guessing here, but seems logical if DHCP will allow incoming DHCP packets on the VM to act it as a DHCP server. This seems useful to protect from a "rogue" (unwanted) DHCP server breaking your network. And the MAC Filter sounds to add rules to block any martian sources from VM, i.e. packets with source MAC not belonging to assigned MAC of the VM virtual interface.