# Generate by ISP Supplies | LearnMikroTik.

com's Firewall tool

# Available at http://mikrotikconfig.com
#
/ip firewall filter
add action=drop chain=forward comment="Drop invalid connections through router"
connection-state=invalid
add action=drop chain=forward comment="Drop all traffic from addresses
on \\\"CountryIPBlocks\\\" address list" \
src-address-list=CountryIPBlocks
add action=drop chain=input comment="Drop all traffic from addresses
on \"CountryIPBlocks\" address list" \
src-address-list=CountryIPBlocks
add chain=input comment="Allow everything from the LAN interface to the router" in-
interface=LAN5
add chain=input comment="Allow established connections to the router, these are OK
because we aren't allowing new connections" \
connection-state=established
add chain=input comment=\
"Allow related connections to the router, these are OK because we aren't
allowing new connections" \
connection-state=related
add action=drop chain=input comment="Drop everything else to the router"
disabled=yes