Although the firewall protects the router from the general public interface, you should still desire to disable RouterOS expert services.The 1st rule accepts packets from now established connections, assuming They are really Protected not to overload the CPU. The next rule drops any packet that connection monitoring identifies as invalid. Following