Although the firewall guards the router from the public interface, you should still need to disable RouterOS products and services. The initial rule accepts packets from previously recognized connections, assuming These are Secure not to overload the CPU. The 2nd rule drops any packet that link t