Dynamic address configuration is the best possibility. Only put in place a DHCP consumer on the public interface.The initial rule accepts packets from presently set up connections, assuming They are really Harmless not to overload the CPU. The next rule drops any packet that connection monitoring identifies as invalid. After that, we setup common s