Dynamic deal with configuration is the best selection. Merely build a DHCP shopper on the public interface.The first rule accepts packets from previously set up connections, assuming they are Protected to not overload the CPU. The second rule drops any packet that connection tracking identifies as invalid. After that, we build common acknowledge ru