What's with the Mikrotik rules?

Question

System administration

So. We have two rules
chain=input action=accept connection-state="" in-interface=ether1-local log-prefix=""
chain=input action=drop in-interface=ether1-local log=no log-prefix=""
The top rule allows all incoming traffic. And the lower one prohibits all incoming traffic. Both refer to the same interface. I draw your attention to the fact that the rules are complete. In the upper rule, there is only connection-state="" .. which, in turn, is not indicated in any way. In this scenario, the second rule manages to block something else. What the fuck????? Maybe I misunderstand the co nnection-state="" entry ?

Answer 1

connection-state can only be estabilished, invalid, new, related. Empty means no connection-state. In the first one, you allow all incoming traffic from eth1, and you deny it with the second rule. The question is what? And for the future, always bring the output not print but export (/ip ffe)