An additional difference is the final rule which drops all new relationship tries within the WAN port to our LAN network (unless DstNat is utilised). Without this rule, if an attacker is familiar with or guesses your local subnet, he/she can set up connections straight to community hosts and lead https://wbofficial.com