Dynamic address configuration is the best possibility. Only arrange a DHCP client on the public interface.The initial rule accepts packets from by now established connections, assuming They can be Harmless to not overload the CPU. The next rule drops any packet that relationship monitoring identifies as invalid. After that, we create regular accept