Yet another difference is the final rule which drops all new relationship attempts in the WAN port to our LAN community (Except DstNat is employed). Without this rule, if an attacker is aware or guesses your local subnet, he/she can create connections straight to neighborhood hosts and cause a security https://wbofficial.com