Dynamic tackle configuration is the easiest choice. Just create a DHCP customer on the public interface.The main rule accepts packets from now proven connections, assuming They may be Risk-free not to overload the CPU. The next rule drops any packet that connection tracking identifies as invalid. After that, we build usual acknowledge guidelines fo