# feb/18/2017 17:19:18 by RouterOS 6.38.

1
# software id = M6F6-N3XI
#
/ip firewall filter
add action=accept chain=input comment="Aceita ICMP" limit=30,5:packet \
protocol=icmp
add action=drop chain=input comment="Aceita ICMP" protocol=icmp
add action=drop chain=input comment="Dropa conexoes invalidas" \
connection-state=invalid
add action=accept chain=input comment=\
"Aceita conexoes estabelecidas e relarionadas" connection-state=\
established,related
add action=accept chain=input comment="Aceita rede-suporte" src-address-list=\
rede-suporte
add action=accept chain=input comment="Aceita OSPF" protocol=ospf
add action=add-src-to-address-list address-list=pre-rede-suporte \
address-list-timeout=5s chain=input comment=\
"Pega IP para lista pre-rede-suporte" dst-port=6969 protocol=tcp
add action=add-src-to-address-list address-list=rede-suporte \
address-list-timeout=3h chain=input comment=\
"Pega IP para lista rede-ssuporte" dst-port=9696 protocol=tcp \
src-address-list=pre-rede-suporte
add action=drop chain=input comment="Drop geral"