increase chain=input in-interface=ether1 motion=settle for protocol=tcp port=8291 comment="allow for Winbox"; incorporate chain=enter in-interface=ether1 action=acknowledge protocol=tcp port=22 remark="let SSH"; increase chain=enter in-interface=ether1 motion=drop comment="block almost everything else"; Make 1 router as a community update central point, that may update MikroTik Router... https://cesarobnyh.pointblog.net/helping-the-others-realize-the-advantages-of-winbox-71897478