Even though the firewall guards the router from the general public interface, you may still choose to disable RouterOS companies. The first rule accepts packets from previously established connections, assuming They can be safe to not overload the CPU. The next rule drops any packet that connecti