Dynamic handle configuration is the best choice. Basically build a DHCP shopper on the general public interface. The main rule accepts packets from by now proven connections, assuming They're Safe and sound to not overload the CPU. The next rule drops any packet that relationship tracking ide