Even though the firewall guards the router from the general public interface, you should still desire to disable RouterOS expert services.The primary rule accepts packets from now established connections, assuming They can be Risk-free not to overload the CPU. The 2nd rule drops any packet that connection tracking identifies as invalid. After that,