/ip firewall filter insert chain=input connection-state=established,associated motion=acknowledge comment="acknowledge founded,linked"; add chain=enter link-condition=invalid action=drop; insert chain=enter in-interface=ether1 protocol=icmp motion=settle for remark="allow ICMP"; include chain=input in-interface=ether1 protocol=tcp port=8291 motion=