Firewall rules

How can i setup the following rules in the firewall:

  1. any packets entering the network that have a source address of an internal host should be denied
  2. no traffic should be allowed to leave the network that does not have an internal source address.
  3. deny network entrance to packets that contain source routing information (check for source routing information within the packet and deny it if it is present)
  1. Drop rule in the forward chain for in-interface equal to WAN and the destination address equal to the inside network space.
  2. Drop rule in the forward chain for in-interface equal to LAN and the source address not equal to the inside network space.
  3. Drop packets in the forward chain that have IPv4 options set for strict or loose source routing. See the ipv4-options documentation in http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter. You’re unclear which direction packet flow you want to apply that to, but it would work with specified destination and source addresses as well as in and out-interfaces.