Dynamic deal with configuration is the best solution. Simply set up a DHCP customer on the public interface. The very first rule accepts packets from by now set up connections, assuming They are really Secure not to overload the CPU. The 2nd rule drops any packet that connection tracking identifi