What are the three chains in the Firewall Filter section?

• A. Forward, Input, Output
• B. Src-Nat, Dst-Nat, Masquerade
• C. Input, Output, Bridge
• D. Forward, Dst-Nat, Null

Answer: (A)

The Firewall Filter section uses three chains that correspond to how traffic moves through a MikroTik router: Forward, Input, and Output. Forward handles packets that pass through the router from one interface to another. Input covers traffic destined for the router itself (like management access or local services). Output is for traffic generated by the router itself to the network. NAT-related chains (Src-Nat, Dst-Nat, Masquerade) live in the NAT table, not the filter table, and a Bridge isn’t a filter chain. So the three filter chains are Forward, Input, and Output.