Dynamic address configuration is the simplest option. Just build a DHCP shopper on the public interface.The 1st rule accepts packets from currently recognized connections, assuming They're Harmless to not overload the CPU. The next rule drops any packet that relationship tracking identifies as invalid. After that, we build typical take regulations