Mikrotik Firewall rules sequesnse

Just playing with mikrotik firewall rules and had a question, How do i insert specific rules in specific place?

Ex: we have 20 rules and i want to insert rule in line number 8 then how to do that? in GUI there isn’t any way to define line number?

Just grab the line and drag it where you want it to be…

But what if i want to put that rules in right place if not then it can break functionality. I thought it would be good to have option like Insert rule, like ASDM :slight_smile:

When you are modifying rules and fear to be locked out, just enable the safe mode, do what you need to do, test
it well, and then disable safe mode again to commit your changes.
Normally there will not be any problem because new rules are inserted at the bottom where they are not reached,
and you then move them to the correct spot. When you really think it can be an issue you first create the rule with
an ACCEPT action, then move it to the correct place, then change the action to DROP or REJECT.



That is really good idea.. Cool man!!! :sunglasses:

While you already answer my question so i have one question related firewall.

Do i need fasttrack rules? Having it and not having it what make difference?

http://wiki.mikrotik.com/wiki/Manual:Wiki/Fasttrack

Fasttrack can really speed up the router’s performance.
If you use it, then queues don’t work because traffic is fast-forwarded and skips most of your configuration.

If you’re not using queues or cpu-based interfaces like pppoe then it can really help.

In general, you want to use it like this:
add chain=forward connection-state=established,related action=fasttrack-connection
add chain=forward connection-state=established,related action=accept

The second rule is for connections that don’t support fasttrack - I think fasttrack only works on TCP and UDP, for instance - I’m not an expert with fasttrack - I just know this is the recommended best practice way to implement it. :wink: