Dynamic handle configuration is the easiest solution. Basically build a DHCP client on the public interface.The initial rule accepts packets from presently set up connections, assuming They're Secure to not overload the CPU. The 2nd rule drops any packet that link tracking identifies as invalid. After that, we set up usual acknowledge policies for