Before I go deploy this NP16 w/ RC1, wanted to double check something. This switch chip supports hardware routing but does NOT support fast-track or NAT in hardware. (per https://help.mikrotik.com/docs/display/ ... 2000Series)
So, if I do a firewall on "INPUT", I just want to verify that this won't touch anything being forwarded at all. I have zero "FORWARD" rules, and I'm assuming (and wanting to verify) that since I don't pull forwarded packets into the CPU, they will remain in the hardware path.
Is my assumption good?