running 2.9rc1, if I do
[admin@MikroTik] > /ip firewall service-port print
Flags: X - disabled, I - invalid
# NAME PORTS
0 I ftp 21
1 I tftp 69
2 I irc 6667
3 X h323
6 X gre
7 X pptp
Some service-port entries are marked as 'invalid'.
What does that mean and how can I make them 'valid'?
Right now I notice that I can't do non-passive FTP
sessions through a masqueraded srcnat connection,
only PASV ftp works, and I suspect this might be related
to the 'invalid' from ftp service-port?