Risk for traffic to slip through during reboot?

RouterOS General
1

Hi,

Question 1: If a RB2011 is rebooted (due to explicit command, crash or power outage), will it then always activate all /ip firewall filter settings, /interface ethernet switch rule settings, etc, BEFORE enabling the interfaces again, or is there a risk that some traffic might slip through during a short time window while RB2011 is starting up? If so, what can I do to minimize that time window?

Question 2: Implementing a script for configuring a RB2011, seems easiest if the script can assume that there is no previous configuration. What do you recommend? Maybe /system reset-configuration with keep-users, no-defaults and run-after-reset? Or looping through all current configuration trying to clear it? Something special I should think of to avoid that traffic might slip through before it has been fully configured?

2

Good question nr. 1. I have realised that pfsense for example responds to pings on wan port during the startup until firewall is running. I have not realised such behaviour on any mikrotik device so far. But I would like to be sure as well.

To question nr. 2. Sometimes even correct config removal will not ensure that previously made export script will fully run.