A different difference is the last rule which drops all new relationship attempts within the WAN port to our LAN network (Until DstNat is utilized). Without having this rule, if an attacker knows or guesses your neighborhood subnet, he/she can build connections directly to local hosts and trigger a stability https://wbofficial.com