THE BEST SIDE OF WINBOX

/ip firewall filter add chain=input connection-condition=recognized,similar action=acknowledge comment="acknowledge established,associated"; include chain=input connection-point out=invalid motion=drop; incorporate chain=enter in-interface=ether1 protocol=icmp motion=settle for comment="enable ICMP"; incorporate chain=enter in-interface=ether1 prot