incorporate chain=enter in-interface=ether1 motion=acknowledge protocol=tcp port=8291 remark="make it possible for Winbox"; add chain=enter in-interface=ether1 action=accept protocol=tcp port=22 comment="let SSH"; insert chain=enter in-interface=ether1 action=fall comment="block almost everything else"; Idea: Although the managed routers listing is encrypted, it can however be loaded ... https://winbox87776.blogzag.com/74408172/detailed-notes-on-winbox