// Aula 12 - Proteção básica em seu RouterOS

/ip firewall filter

add chain=input connection-state=invalid action=drop \
comment="Bloqueia conexoes invalidas"

add chain=input connection-state=established action=accept \

comment="Permitir conexoes estabelecidas"
add chain=input protocol=icmp action=accept \
comment="Permite ICMP"
add chain=input src-address=192.168.88.0/24 action=accept \
in-interface=!LAN
add chain=input action=drop comment="Bloqueia todo o resto"