Dynamic handle configuration is the best solution. Just create a DHCP shopper on the public interface.The main rule accepts packets from now established connections, assuming These are Protected not to overload the CPU. The second rule drops any packet that link monitoring identifies as invalid. After that, we create usual take policies for precise