Mikrotik CCR 無法更新

 新版(7.8) RouterOS 釋出，想要看看有沒有 ROSE storage 可以用，先升級看看，然後就GG了

 工作環境：
    Mikrotik CCR
        firewall DROP all input after some open services

 錯誤訊息： can't resolve DNS ，想必是沒開 DNS 進來，看了一下 log 知道從哪個介面來，從哪個 src port 來
    /ip firewall filter
add action=accept chain=input comment="allow DNS response" in-interface=\
    pppoe-out1 log=yes log-prefix="allow DNS response" protocol=udp src-port=\
    53

 錯誤訊息變了： connection timed out，google之後找到論壇有人討論
    /ip firewall filter
add action=accept chain=input comment="allow Update allow established connections" in-interface=\add action=accept chain=input comment="Allow Update allow established connections" connection-state=\
    established
add action=accept chain=input comment="Allow Update2 allow related connections" connection-state=\
    related

 可以更新了

收工！