Dynamic handle configuration is the easiest alternative. Basically set up a DHCP consumer on the public interface.The very first rule accepts packets from now founded connections, assuming They're Secure not to overload the CPU. The next rule drops any packet that connection monitoring identifies as invalid. After that, we setup standard settle for