/ip firewall filter add chain=forward protocol=icmp icmp-options=0:0 action=accept comment="Allow Ping"
/ip firewall filter add chain=forward protocol=icmp icmp-options=8:0 action=accept comment="Allow Ping"
/ip firewall filter add chain=forward protocol=icmp icmp-options=11:0 action=accept comment="Allow Traceroute"
/ip firewall filter add chain=forward protocol=icmp icmp-options=3:3 action=accept comment="Allow Traceroute"
/ip firewall filter add chain=forward protocol=icmp icmp-options=3:4 action=accept comment="Allow Path MTU Discovery"
/ip firewall filter add chain=forward protocol=icmp action=drop comment="Drop all other ICMP"
Tidak ada komentar:
Posting Komentar