yeah you can do that and dvery easily. just tell it to drop all the packets which have a source and destination ports of 67 and 68.
IPTABLES -A INPUT -i interface -dport 67:68 -sport 67:68 -j DROP
you can goto
netfilter and check out their documentation