Firewall connection-state logic

Hi,

If I create any firewall rule using the connection-state options, such as established | invalid | new | related | untracked, are these procesed as individual flags or as combined flags?

For example, invalid + untracked flags ticked, will this match all possible permutation scenarios, such as:

  • invalid + tracked
  • valid + untracked
  • invalid + untracked

It’s not clear in the wiki or help pages. It makes sense that it matches all permutations. Sometimes in UNIX, defining something means matching all scenarios combined, not sure about how Mikrotik implemented the firewall toggles.

new + estabilished?

Think…