i take the follow from manual of mikrotik:
/ ip firewall filter
add chain=sanity-check protocol=tcp psd=50,3s,3,1
action=add-src-to-address-list address-list=blocked-addr
address-list-timeout=1d comment=“Block port scans (causes high
cpu load)” disabled=yes
add chain=sanity-check protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
action=add-src-to-address-list address-list=blocked-addr
address-list-timeout=1d comment=“Block TCP Null scan” disabled=yes
add chain=sanity-check protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list=blocked-addr
address-list-timeout=1d comment=“Block TCP Xmas scan” disabled=yes
add chain=sanity-check protocol=tcp src-address-list=blocked-addr action=jump
jump-target=drop comment=“” disabled=no
add chain=sanity-check protocol=tcp tcp-flags=rst action=jump jump-target=drop
comment=“Drop TCP RST” disabled=no
add chain=sanity-check protocol=tcp tcp-flags=fin,syn action=jump
jump-target=drop comment=“Drop TCP SYN+FIN” disabled=no
I would want to know if it works therefore for as is written or I must bring of the modifications