Dynamic tackle configuration is the best choice. Basically arrange a DHCP client on the public interface.The 1st rule accepts packets from currently proven connections, assuming They are really Protected not to overload the CPU. The 2nd rule drops any packet that connection tracking identifies as invalid. After that, we arrange common acknowledge r