new firewall rule

RouterOS General
1

Hi,

i would like to make a simple firewall rule that drops several tcp ports
(example 135, 179, 304).

Like this:

/ip firewall rule forward add dst-port=135 protocol=tcp action=drop
/ip firewall rule forward add dst-port=179 protocol=tcp action=drop
/ip firewall rule forward add dst-port=304 protocol=tcp action=drop

Can I join this 3 rules into one rule? How? :blush:


tx,
Boris T

2

2.8 doesn’t support that. I may stand corrected, but I believe 2.9 does.

3

Only for a continuous range of ports (dst-port), you can’t specify a
comma-separated list of ports for it as far as I can see, so it wouldn’t
be useful in this case.

Feature request to MT: Implement port-list (just like address-list) and
allow dst-port-list=… in filter rules?

–Tom

4

Hi,

… found a way to make those rules more clear.

I created new chains in firewall section and
i use jump function in main chains (input, output, forward)
regarding the traffic I want limit. :laughing:


BT