Dynamic deal with configuration is the easiest solution. Basically setup a DHCP shopper on the general public interface.The 1st rule accepts packets from by now set up connections, assuming they are safe to not overload the CPU. The second rule drops any packet that link tracking identifies as invalid. After that, we create typical acknowledge guid