Dynamic tackle configuration is the simplest solution. Simply create a DHCP consumer on the public interface.The initial rule accepts packets from already recognized connections, assuming They can be safe not to overload the CPU. The next rule drops any packet that relationship tracking identifies as invalid. After that, we create standard take gui