An additional variance is the last rule which drops all new link tries in the WAN port to our LAN community (unless DstNat is employed). Without the need of this rule, if an attacker is familiar with or guesses your local subnet, he/she can create connections on to area hosts https://wbofficial.com