A different variance is the last rule which drops all new relationship attempts with the WAN port to our LAN network (Until DstNat is utilized). Without the need of this rule, if an attacker is aware of or guesses your local subnet, he/she can establish connections straight to area hosts https://wbofficial.com