edit invalid firewall rules

Hello,

I’d like to script initial installation of CAPsMAN. I setup the bridge, and then script to update all occurences of ether2 with the new bridge, e.g.

/ip dhcp-server set interface=br-cap [find interface=ether2]

That, however, doesn’t seem to work for the firewall entries that become invalid as soon as the bridge with ether2 is setup. A

/ip firewall filter set in-interface=br-cap [find interface=ether2]

does not work. As a crude and risky workaround, I can use

/ip firewall filter set in-interface=br-cap [find invalid]

I tried all sorts of combinations, also working with a for statements, but to no avail. Anyone has an idea how to solve that? :slight_smile:

Thanks a lot,
Florian