Mikrotik: how to set a rule that allows incoming DST-NAT connections?

Question

Mikrotik

Actually, now I have to allow every incoming port in the firewall in addition to every rule like DST-NAT (port forwarding). Once upon a time, I came across a rule that allows these ports to be passed automatically. But now I can't find this rule for the life of me. Tell me, somebody.

Answer 1

Parvilo from the default settings of the MikroTIK firewall:

/ip firewall filter
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN

I recommend supplementing the default rules with your own if necessary, rather than writing them from scratch.

Answer 2

config show