Dynamic address configuration is the best option. Simply set up a DHCP shopper on the general public interface.The 1st rule accepts packets from already established connections, assuming They are really safe not to overload the CPU. The second rule drops any packet that relationship monitoring identifies as invalid. After that, we build normal sett