Even though the firewall protects the router from the public interface, you may still want to disable RouterOS expert services.The initial rule accepts packets from currently recognized connections, assuming They are really Secure to not overload the CPU. The 2nd rule drops any packet that relationship monitoring identifies as invalid. After that,