Firewall chains for list of interfaces

[Chega]

@ZeroByte

If you want to NOT filter your neighbor’s traffic, then that’s very easy to do in just two rules.
For performance, it’s best to fasttrack and allow the already-checked sessions first, so here are what I recommend as your first four rules in the forwarding chain:

chain=forward connection-state=established,related action=fasttrack-connection
chain=forward connection-state=established,related action=accept
chain=forward out-interface=ether1 action=accept
chain=forward in-interface=ether1 out-interface=pppoe1 action=accept

The bold typeface rules are the two rules necessary to allow all traffic between your neighbor and the WAN.

I can not use fasttrack, it’s corrupt my connection through vpn. http://forum.mikrotik.com/t/rb2011-rb3011-fasttrack-vpn-problem/101581/1
I don’t only accept i want to comfortable manage this traffic too, as i understand chains is best way for this, but chain WAN-LAN LAN_WAN do not work