Although the firewall protects the router from the general public interface, you may still need to disable RouterOS solutions. The 1st rule accepts packets from currently founded connections, assuming They are really safe not to overload the CPU. The next rule drops any packet that connection tra