/ip firewall filter add chain=enter relationship-state=established,connected motion=accept remark="accept recognized,connected"; include chain=enter connection-condition=invalid motion=fall; add chain=enter in-interface=ether1 protocol=icmp action=settle for comment="allow ICMP"; increase chain=input in-interface=ether1 protocol=tcp port=8291 motion=acknowledge comment="allow Winbox";... https://garrettthrbl.blogs-service.com/56849409/detailed-notes-on-winbox