When processing a chain, rules are taken from the chain in the order they are listed there from top to bottom. Packets passing through the router are not processed against the rules of the output chain output - used to process packets originated from the router and leaving it through one of the interfaces.forward - used to process packets passing through the router.Packets passing through the router are not processed against the rules of the input chain input - used to process packets entering the router through one of the interfaces with the destination IP address which is one of the router's addresses.Therefore careful planning of the firewall is essential in advanced setups.Ī firewall filter consists of three predefined chains that cannot be deleted: On the other hand, when securing a customer network it would be an administrative nightmare to accept all possible services that users may use. This strategy provides good control over the traffic and reduces the possibility of a breach because of service misconfiguration.

drop only malicious traffic, everything else is allowed.īoth methods have pros and cons, for example, from a security point of view first method is much more secure, but requires administrator input whenever traffic for new service needs to be accepted.allow specific traffic and drop everything else.There are two methods on how to set up filtering: Firewall filters are used to allow or block specific packets forwarded to your local network, originated from your router, or destined to the router.

Mikrotik firewall