Does anyone now how to set up a SPI firewall feature on RouterOS 3.17?
MikroTik RouterOS firewall offers to filter the following type of packets,
established invalid new related
So, you can work and filter only new connections, and allow/disallow established/related/invalid.