Unless you set IP addresses statically, all devices will initially connect with no IP address.They have to connect in order to get to the DHCP server.
You might not want to block that.
Do they stay un-addressed or (as I see on my own controllers) do they eventually update to show either a valid IP or the self-assigned address which tells us tht DHCP failed (169.254.x.x)?