Want to Block Packets from Outside IPs

Blocking IPs from forward chain in my MikroTik but not actually blocking packets but also capturing packets!

How could I do permanent block of attacking packets!

/ip firewall filter
add chain=input src-address-list=Block_IP action=drop

It is normal to see the packets in torch - this is showing the raw data coming in before it is processed by your router.
-Chris

Or drop packets before connection tracking…

/ip firewall raw
add action=drop chain=prerouting src-address-list=Blacklist

/ip firewall filter
add chain=input src-address-list=Block_IP action=drop

is not capturing packets. I wrote the following rule:

/ip firewall filter
add chain=forward dst-address-list=Block_IP action=drop

but, causes jam into my network !

Sorry I missed your line, if you don’t mind please describe it again.

Hi,
Firewall RAW table allows to selectively bypass or drop packets before connection tracking that way significantly reducing load on CPU. Tool is very useful for DOS attack mitigation.