My RB951G has been online now for about a week. In looking at the IP → Firewall settings of WinBox
there are a number of dropped packets. is this normal, if so what they. If not normal, how can I correct it. Thanks in advance.
/ip firewall filter
add action=drop chain=input comment=“Drop ICMP echo reply” icmp-options=0:0 protocol=icmp
add action=drop chain=input comment=“Drop ICMP echo request” icmp-options=8:0 protocol=icmp
add chain=input comment=“Allow all other ICMP” protocol=icmp
add chain=input comment=“Accept established connections” connection-state=established
add chain=input comment=“Accept related connections” connection-state=related
add action=drop chain=input comment=“Drop non related or established connections” in-interface=ether1-gateway
add chain=forward comment=“Allow established connections” connection-state=established
add chain=forward comment=“Allow new connections” connection-state=new
add chain=forward comment=“Allow related connections” connection-state=related
add action=drop chain=forward comment=“Drop invalid connections” connection-state=invalid
/ip firewall nat
add action=masquerade chain=srcnat comment=“default configuration” disabled=yes out-interface=ether1-gateway
add action=masquerade chain=srcnat out-interface=ether1-gateway to-addresses=0.0.0.0
FireWall settingsWithPNG.rtf (1.37 KB)
It is normal. The firewall rule drops all packets with invalid connection state, so it drops everything what is part of invalid connection.
If you want to protect your network, I recomend to learn more about firewall filters: http://wiki.mikrotik.com/wiki/Firewall_filter
brossler Thank you for the reply, I will read the information.