include chain=enter in-interface=ether1 motion=settle for protocol=tcp port=8291 comment="allow Winbox"; insert chain=input in-interface=ether1 motion=take protocol=tcp port=22 remark="let SSH"; increase chain=input in-interface=ether1 motion=fall remark="block everything else";Tip: Even though the managed routers checklist is encrypted, it might n