add-src-to-address-list - add source address to address list specified by address-list parameter.add-dst-to-address-list - add destination address to address list specified by address-list parameter.A packet is not passed to the next firewall rule. IPv4 PropertiesĪction to take if a packet is matched by the rule: More detailed packet processing in RouterOS is described in the Packet Flow in RouterOS diagram. If a packet has not matched any rule within the built-in chain, then it is accepted. If a packet matches the criteria of the rule, then the specified action is performed on it, and no more rules are processed in that chain (the exception is the passthrough action). When processing a chain, rules are taken from the chain in the order they are listed there from top to bottom. Packets passing through the router are not processed against the rules of the output chain output - used to process packets originated from the router and leaving it through one of the interfaces.forward - used to process packets passing through the router.Packets passing through the router are not processed against the rules of the input chain input - used to process packets entering the router through one of the interfaces with the destination IP address which is one of the router's addresses.Therefore careful planning of the firewall is essential in advanced setups.Ī firewall filter consists of three predefined chains that cannot be deleted: On the other hand, when securing a customer network it would be an administrative nightmare to accept all possible services that users may use. This strategy provides good control over the traffic and reduces the possibility of a breach because of service misconfiguration. drop only malicious traffic, everything else is allowed.īoth methods have pros and cons, for example, from a security point of view first method is much more secure, but requires administrator input whenever traffic for new service needs to be accepted.allow specific traffic and drop everything else.There are two methods on how to set up filtering: Firewall filters are used to allow or block specific packets forwarded to your local network, originated from your router, or destined to the router.

Mikrotik advanced firewall