/ip firewall filter include chain=enter relationship-point out=set up,associated motion=settle for comment="accept proven,associated"; insert chain=enter link-point out=invalid motion=fall; include chain=enter in-interface=ether1 protocol=icmp motion=accept comment="make it possible for ICMP"; increase chain=enter in-interface=ether1 protocol=tcp p