# 2025-02-07 14:12:50 by RouterOS 7.13.3
# software id = 
#
/ip firewall filter
add action=accept chain=input comment="ACEITA 50 PACOTES DE ICMP POR SEGUNDO" \
    limit=50,5:packet protocol=icmp
add action=drop chain=input comment="DROP ICMP FLOOD" protocol=icmp
add action=accept chain=input comment=\
    "ACEITA CONEX\D5ES ESTABELECIDAS OU RELACIONADAS" connection-state=\
    established,related
add action=accept chain=input comment=\
    "ACEITA ACESSO COMPLETO A PARTIR DA REDE DE SUPORTE" src-address-list=\
    rede-suporte
add action=add-src-to-address-list address-list=pre-rede-suporte \
    address-list-timeout=3s chain=input comment=\
    "PEGA IP PARA LISTA PRE REDE SUPORTE" dst-port=9050 protocol=tcp
add action=add-src-to-address-list address-list=rede-suporte \
    address-list-timeout=5h chain=input comment="PEGA IP PARA REDE SUPORTE" \
    dst-port=5090 protocol=tcp src-address-list=pre-rede-suporte
add action=drop chain=input comment="DROP GERAL" disabled=yes
