Help Review Firewall Filters

[jaclaz]

@helpmytik

add action=drop chain=forward comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !*2000011

Do you actually have an interface list called "*2000011"?

Point #21 here:
GP & CSA for Mikrotik devices