hi there,
im new in mikrotik device, so i think i can start here.
in cisco asa firewall from outside port ( level 0 ) by default cannot initiate connection to inside port ( level 100 ). but inside port can have full access to outside port.
how to get the same result for firewall filter in mikrotik? is this related with established, related and invalid connection state?
thank you
Mikrotik’s firewall does not use the concept of inside port and outside port natively, and distinguishes between locally originated/terminated traffic (i.e. packets sent/received by the device itself) and transit traffic. Have a look at this supercharged introduction into Mikrotik firewall, and have a look at the packet flow diagram to understand how the packets pass through various firewall processing stages (mangle, nat, filter) depending on their basic type (incoming packet, outgoing packet, forwarded packet). Google for interface list, _interface list membe_r and ip firewall address-list keywords to find examples of advanced configurations once you grasp the basic concept which is the same like the one of linux netfilter (better known as iptables).