/ip firewall filter
add action=jump chain=input comment="" connection-state=new disabled=no \
dst-port=21,22,23,80,8291 jump-target=acesso_adm protocol=tcp
add action=accept chain=input comment="" connection-state=established \
disabled=no
add action=accept chain=input comment="" connection-state=related disabled=no
add action=reject chain=input comment="" disabled=no in-interface=ether1 \
reject-with=icmp-admin-prohibited
add action=accept chain=acesso_adm comment="" disabled=no src-address-list=\
acesso_adm
add action=reject chain=acesso_adm comment="" disabled=no reject-with=\
icmp-network-unreachable
/ip firewall address-list
add address=xxx.xx.0.0/24 comment="" disabled=no list=acesso_adm
add address=yyy.yy.15.0/24 comment="" disabled=no list=acesso_adm