Dynamic deal with configuration is the easiest alternative. Just create a DHCP customer on the public interface.The main rule accepts packets from now founded connections, assuming they are safe to not overload the CPU. The next rule drops any packet that relationship tracking identifies as invalid. After that, we setup standard accept guidelines f