Dynamic tackle configuration is the best possibility. Simply just setup a DHCP consumer on the public interface.The first rule accepts packets from previously recognized connections, assuming they are Secure to not overload the CPU. The second rule drops any packet that relationship tracking identifies as invalid. After that, we setup common accept