Hi!
slirpvde discards packets with TTL 1. However, some equipments like to send DHCP requests with TTL 1 (like a Juniper SRX). QEMU already did the change to accept such a TTL:
http://git.qemu.org/?p=qemu.git;a=commitdiff;h=0d491754d00a70c6af675312b9de8e382240a8bb;hp=abdfd9500e07fab7d6ffd4385fa30a065c329a39
The idea is to use the exact same patch (which applies cleanly)