mtik firewall filter rules

Flags: X - disabled, I - invalid, D - dynamic
 0    chain=input action=accept protocol=icmp

 1    chain=input action=accept connection-state=established

 2    chain=input action=accept connection-state=related

 3    ;;; allow IPsec NAT
      chain=input action=accept protocol=udp dst-port=4500

 4    ;;; allow IKE
      chain=input action=accept protocol=udp dst-port=500

 5    ;;; allow l2tp
      chain=input action=accept protocol=udp dst-port=1701

 6    ;;; allow pptp
      chain=input action=accept protocol=tcp dst-port=1723

 7    ;;; allow sstp
      chain=input action=accept protocol=tcp dst-port=443

 8    chain=input action=drop in-interface=pppoe-out1


 3    ;;; allow IPsec NAT
      chain=input action=accept protocol=udp dst-port=4500

 4    ;;; allow IKE
      chain=input action=accept protocol=udp dst-port=500

 5    ;;; allow l2tp
      chain=input action=accept protocol=udp dst-port=1701

 6    ;;; allow pptp
      chain=input action=accept protocol=tcp dst-port=1723

 7    ;;; allow sstp
      chain=input action=accept protocol=tcp dst-port=443

 8    chain=input action=drop in-interface=pppoe-out1