/interface bridge
add name=FW protocol-mode=none
add name=vlan350 protocol-mode=none
add name=vlan400 protocol-mode=none
add name=vlan450 protocol-mode=none
add name=vlan500 protocol-mode=none
add name=vlan655 protocol-mode=none
add name=vlan1024 protocol-mode=none
add name=vlan3302 protocol-mode=none
add name=vlan3366 protocol-mode=none
add name=wifi protocol-mode=none
/interface bridge filter
add action=accept chain=forward comment=INPUT_RDP_my_public dst-address=my_public/32 dst-port=3388 in-interface=vlan500_eth11 ip-protocol=tcp log-prefix=FW_BR_500 mac-protocol=ip src-address=dst_ip/32
add action=accept chain=forward comment=INPUT_RDP_my_public dst-address=my_public/32 dst-port=3388 in-interface=vlan500_eth11 ip-protocol=tcp log-prefix=FW_BR_500 mac-protocol=ip src-address=dst_ip/32
add action=accept chain=forward comment=INPUT_RDP_my_public dst-address=my_public/32 dst-port=3388 in-interface=vlan500_eth11 ip-protocol=tcp log-prefix=FW_BR_500 mac-protocol=ip src-address=dst_ip/32
add action=accept chain=forward comment=INPUT_RDP_my_public dst-address=my_public/32 dst-port=3388 in-interface=vlan500_eth11 ip-protocol=tcp log-prefix=FW_BR_500 mac-protocol=ip src-address=dst_ip/32
add action=drop chain=forward comment=INPUT_DROP_RDP_my_public dst-address=my_public/32 dst-port=3388 in-interface=vlan500_eth11 ip-protocol=tcp log-prefix=FW_BR_500 mac-protocol=ip
add action=accept chain=forward comment=INPUT_DROP_RDP_my_public dst-address=my_public/32 dst-port=3393-3395 in-interface=vlan500_eth11 ip-protocol=tcp log-prefix=FW_BR_500 mac-protocol=ip src-address=dst_ip/32
add action=drop chain=forward comment=INPUT_DROP_RDP_my_public dst-address=my_public/32 dst-port=3393-3395 in-interface=vlan500_eth11 ip-protocol=tcp log-prefix=FW_BR_500 mac-protocol=ip
add action=drop chain=forward comment="INPUT_DROP_RDP_my_pub " dst-address=my_pub/32 dst-port=3389 in-interface=vlan500_eth11 ip-protocol=tcp log-prefix=FW_BR_500 mac-protocol=ip
/interface bridge port
add bridge=FW hw=no interface=ether11
add bridge=FW hw=no interface=ether12
add bridge=vlan350 interface=vlan350_eth11
add bridge=vlan350 interface=vlan350_eth12
add bridge=vlan400 interface=vlan400_eth11
add bridge=vlan400 interface=vlan400_eth12
add bridge=vlan450 interface=vlan450_eth11
add bridge=vlan450 interface=vlan450_eth12
add bridge=vlan500 interface=vlan500_eth11
add bridge=vlan500 interface=vlan500_eth12
add bridge=vlan655 interface=vlan655_eth11
add bridge=vlan655 interface=vlan655_eth12
add bridge=vlan1024 interface=vlan1024_eth11
add bridge=vlan1024 interface=vlan1024_eth12
add bridge=vlan3302 interface=vlan3302_eth11
add bridge=vlan3302 interface=vlan3302_eth12
add bridge=vlan3366 interface=vlan3366_eth11
add bridge=vlan3366 interface=vlan3366_eth12
/interface bridge settings
set use-ip-firewall-for-vlan=yes
/interface bridge vlan
add bridge=FW tagged=ether11,ether12 vlan-ids=655
add bridge=FW tagged=ether11,ether12 vlan-ids=500
add bridge=FW tagged=ether11,ether12 vlan-ids=3366
add bridge=FW tagged=ether11,ether12 vlan-ids=1024
add bridge=FW tagged=ether11,ether12 vlan-ids=350
add bridge=FW tagged=ether11,ether12 vlan-ids=400
add bridge=FW tagged=ether11,ether12 vlan-ids=450
add bridge=FW tagged=ether11,ether12 vlan-ids=3302