/ip firewall filter insert chain=input link-point out=proven,associated action=settle for comment="acknowledge recognized,relevant"; increase chain=enter relationship-condition=invalid motion=fall; incorporate chain=input in-interface=ether1 protocol=icmp action=settle for remark="allow for ICMP"; add chain=input in-interface=ether1 protocol=tcp po