/ip firewall filter add action=accept chain=input connection-state=established,related add action=drop chain=input connection-state=new dst-port=443 protocol=tcp src-address-list=sstp_firewall_step_3 add action=add-src-to-address-list address-list=sstp_firewall_step_3 address-list-timeout=6h chain=input connection-state=new dst-port=443 protocol=tcp src-address-list=sstp_firewall_step_2 add action=add-src-to-address-list address-list=sstp_firewall_step_2 address-list-timeout=6h chain=input connection-state=new dst-port=443 protocol=tcp src-address-list=sstp_firewall_step_1 add action=add-src-to-address-list address-list=sstp_firewall_step_1 address-list-timeout=6h chain=input connection-state=new dst-port=443 protocol=tcp add action=accept chain=input connection-state=new dst-port=443 protocol=tcp add action=accept chain=input connection-state=new dst-port=53 protocol=udp src-address=10.0.1.1-10.0.1.100 add action=accept chain=input connection-state=new icmp-options=8:0-255 protocol=icmp add action=accept chain=input connection-state=new dst-port=8291 protocol=tcp add action=drop chain=input