increase chain=input in-interface=ether1 motion=accept protocol=tcp port=8291 comment="permit Winbox"; incorporate chain=input in-interface=ether1 action=settle for protocol=tcp port=22 comment="make it possible for SSH"; add chain=input in-interface=ether1 motion=fall comment="block almost everything else"; ) As MAC connection operates on Layer2, it can be done to hook up with the ro... https://shanedpyhr.anchor-blog.com/10419950/winbox-an-overview