/ip firewall filter #Нужно раскурить!
# Условия обработки пакетов #Условия обработки пакетов для
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked in-interface-list=WAN
add action=accept chain=input connection-state=established in-interface-list=WAN
add action=accept chain=input connection-state=related in-interface-list=WAN