Dynamic handle configuration is the easiest solution. Simply create a DHCP customer on the public interface.The first rule accepts packets from already proven connections, assuming They can be Risk-free not to overload the CPU. The 2nd rule drops any packet that connection tracking identifies as invalid. After that, we create normal settle for poli