Dynamic tackle configuration is the best choice. Simply just arrange a DHCP client on the public interface. The primary rule accepts packets from already proven connections, assuming They are really Protected not to overload the CPU. The 2nd rule drops any packet that connection tracking identifi