Dynamic handle configuration is the best option. Simply just put in place a DHCP client on the public interface. The very first rule accepts packets from presently set up connections, assuming They're Harmless not to overload the CPU. The next rule drops any packet that link monitoring identi