tomiso
1
Hi!
I’m no firewall guru and I’m trying to set up a basic home router.
Are these rules still relevant for RouterOS 5.19?
http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter#Basic_examples
Maby someone have better firewall rules for a home router?!
I’m have a RB450G
cbrown
2
I glanced over them and they look fine. Did you have a problem with them?
tomiso
3
Well no 
But the wikipage states: Applies to RouterOS: v3, v4
Firewall rules are sufficient for a home router?
Thanks!
cbrown
4
Yea they are sufficient for a home router.
tomiso
5
One question.
I redid my firewall rules and used http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter#Basic_examples.
When pasting (from last section) into terminal
add chain=icmp protocol=icmp icmp-options=0:0 action=accept \
comment="echo reply"
add chain=icmp protocol=icmp icmp-options=3:0 action=accept \
comment="net unreachable"
add chain=icmp protocol=icmp icmp-options=3:1 action=accept \
comment="host unreachable"
add chain=icmp protocol=icmp icmp-options=3:4 action=accept \
comment="host unreachable fragmentation required"
add chain=icmp protocol=icmp icmp-options=4:0 action=accept \
comment="allow source quench"
add chain=icmp protocol=icmp icmp-options=8:0 action=accept \
comment="allow echo request"
add chain=icmp protocol=icmp icmp-options=11:0 action=accept \
comment="allow time exceed"
add chain=icmp protocol=icmp icmp-options=12:0 action=accept \
comment="allow parameter bad"
add chain=icmp action=drop comment="deny all other types"
I get an error message from this line:
add chain=icmp protocol=icmp icmp-options=12:0 action=accept
comment=“allow parameter bad”
[admin@MikroTik] /ip firewall filter> comment=“allow parameter bad”
expected end of command (line 1 column 9)
I removed the comment and pasted it into terminal and then added comment, so no harm done.
But I’m still curious why?!
Any ideas?