Skip to content

Instantly share code, notes, and snippets.

@jk0
Created September 17, 2012 21:06
Show Gist options
  • Save jk0/3739781 to your computer and use it in GitHub Desktop.
Save jk0/3739781 to your computer and use it in GitHub Desktop.
RouterOS Firewall
[jkearney@Router] > /ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade to-addresses=0.0.0.0 out-interface=ether1-gateway
[jkearney@Router] >
[jkearney@Router] > /ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=accept protocol=icmp in-interface=ether1-gateway
1 chain=input action=accept protocol=udp in-interface=ether1-gateway dst-port=500,1701,4500
2 chain=input action=accept connection-state=established in-interface=ether1-gateway
3 chain=forward action=accept connection-state=established in-interface=ether1-gateway
4 chain=input action=accept connection-state=related in-interface=ether1-gateway
5 chain=forward action=accept connection-state=related in-interface=ether1-gateway
6 chain=forward action=reject reject-with=icmp-port-unreachable in-interface=ether1-gateway
7 chain=input action=reject reject-with=icmp-port-unreachable in-interface=ether1-gateway
[jkearney@Router] >
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment