How to Jump with MikroTik

A short video about custom chains and why use them.

[FinlayDaGk]

Who else here expected them to literally start jumping around the office holding a MikroTik device?

[salvadorseekatzrisquez]

That was helpful. I didn’t know you could create “example chain” like that and use it like that. Awesome video.

[celebraces]

If you use a radius server for your PPPoE (and possibly DHCP) customers, you can use a 'Filter-Id' attribute to automatically create a jump rule for that connection. You might have a customer that wants their service firewall turned off, so you can just update their radius attribute.

[mehdimj_ir]

Keep up the good work with this pro tips, Thanks :)

[krdhxr]

Very everyone should get a MikroTik and use it to block Facebook now.

[pedrojunior]

Now i learn how i can use the Jump!! Thank you @mikrotik

[glrfieva]

its handy for efficiency too, less CPU cycles to get past the if:SRC-IP=1.1.1.1, then action a, b, c, d, e, f, g.... it only needs to skip if not that IP and continue on. so a very handy feature

[MladenMarinov]

This is why I love MT - everything is as in linux iptable.
Can we also have deep packet inspection and see the domain domain names/ips on https and quic traffic?

[hristobarbolov]

I love your videos! Could you make one for IKEv2 setup please?

[hectorchimal]

Sería de gran ayuda que realizan más ejemplos de implementación aplicados en la vida real. Excelente video!

[SiBex_ovh]

Ohh, with jump rule who create me about 30 differ common/general group of rules I always do end rule like Drop/Accept or RETURN who will back to continue processing firewall rules just after jump rule who activate it - this should be show when we speak about jump-s in firewall. I just say, example is to simple, just adding finish action or mention that ACCEPT is default one inside jump and rule not back to main forward. will finish topic too.

[alexstepanov]

Hi! Good lesson, but you forgot about the "return" rule... And how soon mikrotik will have a grouping of firewall rules in GUI? I cry, when I try to reading kilometers of rules ...

[shaunclarke]

Does the jump rule need to be above the custom chain entries?

This gets harder to maintain when you often filter the firewall rules by a specific chain.

[mdng]

Why do the Dynamically created jump rules for kid-control get created in an opposite manner where the jump rule is applied to all and instead the filters under the resulting jump chain are made to do all the processing?

[BudiSetiawan-iden]

Random reboot, bgp bugs caused some of my device already jumped to another brand

[rizwanarasheed]

I tried to block Facebook using the example shown but users can still access Facebook. I set the TLS host to *facebook* - is this correct? What am I missing?

[DmMukhin]

Please add subtitles to the video.
The author is very quiet. Thanks

[alimibrahem]

But when we rename the chain as example, does that make any effect on this rule..? I mean how the router will know if this rule is input or output or farward..?

[DmitrijPokhilko]

А не легче через address list сделать?

[kalpakmukhopadhyay]

only a stable BGP stack with BFD can make me jump with mikrotik xD