Although the firewall guards the router from the public interface, you should still need to disable RouterOS services.The 1st rule accepts packets from by now proven connections, assuming They're Harmless to not overload the CPU. The next rule drops any packet that relationship tracking identifies as invalid. After that, we setup common acknowledge