Dynamic address configuration is the best possibility. Simply just put in place a DHCP customer on the general public interface.The first rule accepts packets from currently set up connections, assuming They may be Risk-free not to overload the CPU. The second rule drops any packet that relationship tracking identifies as invalid. After that, we ar