Dynamic deal with configuration is the simplest selection. Simply just set up a DHCP client on the public interface.The first rule accepts packets from already proven connections, assuming They are really Protected not to overload the CPU. The 2nd rule drops any packet that connection tracking identifies as invalid. After that, we build typical ack