Dynamic address configuration is the best option. Just create a DHCP consumer on the public interface.The initial rule accepts packets from by now set up connections, assuming They are really Secure not to overload the CPU. The 2nd rule drops any packet that relationship tracking identifies as invalid. After that, we create standard take rules for