/ip firewall filter add chain=input connection-point out=set up,connected motion=acknowledge remark="take proven,linked"; include chain=enter link-point out=invalid action=drop; incorporate chain=enter in-interface=ether1 protocol=icmp action=settle for comment="permit ICMP"; insert chain=input in-interface=ether1 protocol=tcp port=8291 action=take