Dynamic handle configuration is the simplest possibility. Basically create a DHCP shopper on the public interface.The 1st rule accepts packets from already recognized connections, assuming they are Secure to not overload the CPU. The second rule drops any packet that link tracking identifies as invalid. After that, we put in place usual accept prin