Even though the firewall guards the router from the general public interface, you should still desire to disable RouterOS expert services.The primary rule accepts packets from now set up connections, assuming They can be Harmless not to overload the CPU. The second rule drops any packet that connection tracking identifies as invalid. After that, we