Dynamic address configuration is the easiest alternative. Basically build a DHCP shopper on the general public interface.The 1st rule accepts packets from currently established connections, assuming These are safe not to overload the CPU. The 2nd rule drops any packet that relationship tracking identifies as invalid. Following that, we build regula