I'm by no means an expert in TFTP. I used it for a while when I was dealing with LTSP back before PXE Boot became more widely used. I did find this, however, that /might/ lead you in the right direction. Does the client have a `firewalld` rule as well?