Or add them all together, no prints or anything between.
Go to the GUI. Click on the first one. Shift click on the last one. Drag them to the order you want.

On 4/18/2016 2:35 PM, Sam Tetherow wrote:
If what you are trying to do is have a group of firewall rules before another group the easiest was is to add a separate chain.

/ip firewall filter add action=jump chain=input protocol=icmp jump-target=icmpExceptions place-before=0 /ip firewall filter add chain=icmpExceptions action=accept comment="ICMP allowed" disaled=no src-address=x.x.x.0/24 /ip firewall filter add chain=icmpExceptions action=accept comment="ICMP allowed" disaled=no src-address=x.x.x.0/24 /ip firewall filter add chain=icmpExceptions action=accept comment="ICMP allowed" disaled=no src-address=x.x.x.0/24 /ip firewall filter add chain=icmpExceptions action=accept comment="ICMP allowed" disaled=no src-address=x.x.x.0/26

On 04/18/2016 01:22 PM, Roy, Jerry wrote:
Is there a better way to do this?

It leaves duplicated numbers in the FW Filter rules and locks it up. I am trying to add the following lines all before "0" (Zero)

/ip firewall filter
print
add action=accept chain=input comment="ICMP allowed" disabled=no protocol=icmp src-address=x.x.x.0/24 place-before=0
print
add action=accept chain=input disabled=no protocol=icmp src-address= x.x.x.0/24 place-before=1
print
add action=accept chain=input disabled=no protocol=icmp src-address= x.x.x.0/24 place-before=2
print
add action=accept chain=input disabled=no protocol=icmp src-address= x.x.x.0/24 place-before=3
print
add action=accept chain=input disabled=no protocol=icmp src-address= x.x.x.0/26 place-before=4
print

TIA
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.butchevans.com/pipermail/mikrotik/attachments/20160418/5d7549d6/attachment.html>
_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://mail.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://mail.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS


-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2016.0.7539 / Virus Database: 4545/12056 - Release Date: 04/18/16



--
Scott Reed

Wireless Networking
Network Design, Installation and Administration
Mikrotik Advanced Certified


_______________________________________________
Mikrotik mailing list
Mikrotik@mail.butchevans.com
http://mail.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Reply via email to