Identifying source of dynamic firewall rule

I have a rule that I did not explicitly create:

/ip firewall filter 
protocol=udp dst-port=<PORT#> action=accept place=1

I attempted to delete but received the message "can't remove dynamic object"

How can I discover what created this filter rule?

Perhaps it was the evil duck twin that did it???
There is no such default rule that I am aware of.
It doesn’t even indicate which chain is involved, forward? input? etc.
Looks like a half finished rule if anything.

provide full export for review

/export file=anynameyouwish (minus router serial number, any public WANIP information, keys, dhcp lease lists)

I think it's the ip->cloud->bth vpn. It allows the wireguard connection. If you want to get rid of it, turn off bth.

1 Like

Lurker, I thought BTH only created dynamic rules?
I guess a config export would nOT have shown the rule?

I don't think that's an actual export...

You mean one of those that you cannot remove?

:roll_eyes:

Good point, I missed that. Thanks!