Dynamic handle configuration is the easiest selection. Basically build a DHCP shopper on the general public interface. The main rule accepts packets from now set up connections, assuming they are Secure not to overload the CPU. The 2nd rule drops any packet that link tracking identifies as invali