Dynamic address configuration is the best choice. Only put in place a DHCP customer on the public interface.The 1st rule accepts packets from already established connections, assuming They can be Secure not to overload the CPU. The next rule drops any packet that connection tracking identifies as invalid. After that, we arrange usual settle for pro