Dynamic handle configuration is the best choice. Only set up a DHCP customer on the public interface.The very first rule accepts packets from now set up connections, assuming they are Risk-free to not overload the CPU. The next rule drops any packet that connection tracking identifies as invalid. Following that, we arrange common take rules for par