How to import firewall rules

RouterOS Beginner Basics
1

I have RB 751U-2HnD (fw.6.34.2) and I want to now how to import firewall rules.

I tried to do this, but get error:

[root@MikroTik] > import firewall.rsc

expected command name (line 12 column 1)

Thx Mike

2

Try this:

import file-name=firewall.rsc
3

Not possible… :frowning:

[root@MikroTik] > import file-name=firewall.rsc
expected command name (line 12 column 1)
[root@MikroTik] > import file-name=firewall.rsc
expected command name (line 12 column 1)
[root@MikroTik] >

4

The problem is inside firewall.rsc … line 12 column 1 … could you post your firewall.rsc ?

5

mar/04/2016 20:29:02 by RouterOS 6.34.2

software id = GE10-???

/ip firewall filter
add chain=forward disabled=yes
/ip firewall mangle
add chain=forward connection-nat-state=srcnat in-interface=ether4
out-interface=“Drei 4G”
/ip firewall nat
add action=masquerade chain=srcnat out-interface=“Drei 4G”

So far is the new one..

From here is the old one (fw 2.95) :confused:

Standart Firewall (Standart firewall setting)

/ip firewall filter add chain=forward connection-state=invalid action=drop comment=“Drop invalid connections” disabled=no
/ip firewall filter add chain=forward connection-state=established action=accept comment=“Established Connections” disabled=no

6

add a \ to the end of the line before the one that starts with “disabled=no”

this hard carriage return is what’s messed up the script - or you could just backspace the “disabled=no” to be on the same line as the rest of the command before it.

7

Pls. wrote me down the what you really means..

8

It might just be the forum’s software that did this on my screen:
/ip firewall filter add chain=input connection-state=invalid action=drop comment=“Drop invalid connections” disabled=no
/ip firewall filter add chain=input tcp-flags=!syn connection-state=established action=accept comment=“Accept established connections” disabled=no
/ip firewall filter add chain=input connection-state=related action=accept comment=“Accept related connections” disabled=no
/ip firewall filter add chain=input action=jump jump-target=virus comment=“!!! Check for well-known viruses !!!” disabled=no

(the underlined disabled=no was on its own line on my screen)

If this is on its own line in your script, either move it up to be on the same line with the rule after “Accept established connections” or else add a \ character to the end of that line.

Basically, open your script file, count down to the 12th line, and that’s where your problem is - fix whatever syntax error you find there and try again.

9

Hi ZeroByte,

Really I have to delete some line and some comments and now works fine! :smiley:

Thx Mike