default configuration input chain

RouterOS Beginner Basics
1

Just a quick question as I am trying to understand Firewall Filter rules. On the default config for my RB2011 there is an entry of “add action=drop chain=input comment =“default configuration” in-interface=\ether1-gateway”. Am I correct in thinking this is a simple catch all rule preventing Wan traffic on Ether1 from accessing the Mikrotik itself, but allows traffic to continue to be routed to destinations inside the Lan?

Thank you

2

That sounds about right. The forward chain governs the traffic destined for your LAN, by default (certainly on my RB450G) it is empty which seems to be an implicit deny all. Return traffic to outbound connections will be pin-holed automatically, so unless you need inbound ports forwarded you can essentially leave it as-is.