Firewall Filter Rules & Raw Table

1. Rantai Firewall Filter (Chains)

• Input Chain: Menyaring paket data yang ditujukan langsung ke router MikroTik (misal akses Winbox, SSH, WebFig, DNS request ke router).
• Forward Chain: Menyaring paket data yang melintasi router dari satu interface ke interface lain (misal koneksi internet klien LAN).
• Output Chain: Menyaring paket data yang berasal dari proses internal router menuju ke luar jaringan.

2. Skrip Standard Firewall Filter Industri

# ================= INPUT CHAIN (PROTEKSI ROUTER) =================
/ip firewall filter add chain=input connection-state=established,related,untracked action=accept comment="Accept Established & Related"
/ip firewall filter add chain=input connection-state=invalid action=drop comment="Drop Invalid Packets"
/ip firewall filter add chain=input protocol=icmp action=accept comment="Allow ICMP Ping"
/ip firewall filter add chain=input in-interface=ether2-LAN-Klien action=accept comment="Allow LAN to Router"
/ip firewall filter add chain=input action=drop comment="Drop All Other Input from WAN"

# ================= FORWARD CHAIN (PROTEKSI TRAFFIC KLIEN) =================
/ip firewall filter add chain=forward action=fasttrack-connection connection-state=established,related comment="FastTrack Acceleration"
/ip firewall filter add chain=forward connection-state=established,related,untracked action=accept
/ip firewall filter add chain=forward connection-state=invalid action=drop
/ip firewall filter add chain=forward in-interface=ether2-LAN-Klien out-interface=ether1-WAN-ISP action=accept comment="Allow Internet Out"
/ip firewall filter add chain=forward connection-nat-state=dstnat action=accept comment="Allow Port Forwarding"
/ip firewall filter add chain=forward action=drop comment="Drop All Other Forward"