Dynamic tackle configuration is the best option. Just build a DHCP shopper on the general public interface.The very first rule accepts packets from by now established connections, assuming These are safe to not overload the CPU. The 2nd rule drops any packet that connection tracking identifies as invalid. Following that, we create regular accept pr