Firewall

/ip firewall nat add chain=dst nat dst-address=192.168.0.1
protocol=tcp dst-port=80 action=dst-nat to-address=192.168.5.1
to-ports=80

IP Firewall

1. add chain=input action=drop protocol=tcp ip-in interface=lan dst-port=135-139, 445
2. add chain=input action-dropprotocol-udp in interface-lan dst-port=135-139, 445
3. add chain=forward action=drop protocol=tcp in-interface=lan dst-port=25, 135, 137- 139, 445, 593, 1025, 4691, 5933
4. add chain=forward action=drop protocol=udp in-interface=lan dst-port=25, 135, 137-139, 445, 593, 1025, 4691, 5933
5. add chain=forward action-drop-p2p-bit-torrent
6. add chain=forward action=accept connection-state=esfableshed
7. add chain=forward action=accept connection-state=related
8. add chain-forward action=accept-drop connection-state=invalid