Dynamic tackle configuration is the best option. Just build a DHCP client on the general public interface. The initial rule accepts packets from by now set up connections, assuming These are safe to not overload the CPU. The next rule drops any packet that relationship monitoring identifies as in