Even though the firewall protects the router from the public interface, you should still would like to disable RouterOS services. The primary rule accepts packets from now established connections, assuming They are really Protected not to overload the CPU. The second rule drops any packet that re