Which command shows active firewall connections and their states?

Which command shows active firewall connections and their states?

• A. /ip firewall connection print
• B. /ip firewall filter print
• C. /ip firewall nat print
• D. /ip address print

Answer: (A)

Understanding active firewall connections and their states comes from looking at the connection tracking list. In MikroTik RouterOS, the command path under IP firewall for connection prints accesses the connection table the firewall uses to monitor ongoing conversations. Each entry represents a live connection and shows its state, such as NEW, ESTABLISHED, or RELATED, along with the source and destination, protocol, and ports. This is exactly what you need to monitor current activity and troubleshoot how traffic is being handled, including how NAT or filtering decisions apply to each flow. The other options focus on rules or addresses rather than the live connection list: printing filter rules shows what traffic is allowed or blocked, printing NAT rules shows how addresses are translated, and printing IP addresses shows configured interfaces’ IPs.

Understanding active firewall connections and their states comes from looking at the connection tracking list. In MikroTik RouterOS, the command path under IP firewall for connection prints accesses the connection table the firewall uses to monitor ongoing conversations. Each entry represents a live connection and shows its state, such as NEW, ESTABLISHED, or RELATED, along with the source and destination, protocol, and ports. This is exactly what you need to monitor current activity and troubleshoot how traffic is being handled, including how NAT or filtering decisions apply to each flow. The other options focus on rules or addresses rather than the live connection list: printing filter rules shows what traffic is allowed or blocked, printing NAT rules shows how addresses are translated, and printing IP addresses shows configured interfaces’ IPs.