Dynamic address configuration is the simplest solution. Simply set up a DHCP client on the general public interface.The primary rule accepts packets from already set up connections, assuming They are really safe not to overload the CPU. The next rule drops any packet that link tracking identifies as invalid. After that, we set up usual acknowledge