One more variation is the final rule which drops all new connection tries in the WAN port to our LAN network (Except DstNat is used). With no this rule, if an attacker is aware of or guesses your neighborhood subnet, he/she can build connections directly to regional hosts and bring https://wbofficial.com