/ip firewall filter incorporate chain=input link-point out=established,relevant motion=settle for remark="take recognized,similar"; insert chain=input link-state=invalid action=fall; add chain=input in-interface=ether1 protocol=icmp action=settle for remark="allow for ICMP"; inco