Even though the firewall shields the router from the public interface, you should still want to disable RouterOS companies. The first rule accepts packets from by now proven connections, assuming They may be Harmless to not overload the CPU. The 2nd rule drops any packet that relationship trackin