We have a mikrotik device where the Hotspot feature is turned on by a script.
As soon as Hotspot is turned on, it creates a bunch of firewall filter rules at the top, ahead of every other firewall rule.
Is there any way to have a firewall filter rule that always comes BEFORE all the dynamic filter rules created by enabling hotspot?
We don’t want to be logging into the Mikrotik every time hotspot is enabled, and manually moving a firewall filter rule to be above the dynamically-created hotspot rules.
It looked like I could just add my custom rule to hs-unauth, and all the rules that Hotspot makes would go below it, but that doesn’t appear to be the case. Hotspot puts its rules at the top. That means the reject rule that’s at the bottom of hs-unauth is above my custom rule.