Another variation is the last rule which drops all new relationship attempts within the WAN port to our LAN network (unless DstNat is utilised). Without having this rule, if an attacker knows or guesses your neighborhood subnet, he/she will be able to set up connections straight to nearby hosts and https://wbofficial.com