Although the firewall protects the router from the general public interface, you should still would like to disable RouterOS services.The main rule accepts packets from currently proven connections, assuming They can be Protected to not overload the CPU. The next rule drops any packet that relationship tracking identifies as invalid. Following that