add chain=input in-interface=ether1 motion=take protocol=tcp port=8291 remark="enable Winbox"; insert chain=input in-interface=ether1 action=settle for protocol=tcp port=22 comment="make it possible for SSH"; insert chain=input in-interface=ether1 action=drop comment="block almost everything else"; Take into account that the vast majority of community drivers will never permit IP stac... https://winbox22221.dreamyblogs.com/30522116/a-simple-key-for-winbox-unveiled