/ip firewall filter insert chain=input relationship-condition=set up,linked action=settle for comment="accept recognized,similar"; add chain=input link-state=invalid motion=drop; increase chain=input in-interface=ether1 protocol=icmp action=settle for remark="allow for ICMP"; incorporate chain=enter in-interface=ether1 protocol=tcp port=8291 action