Although the firewall protects the router from the general public interface, you should still need to disable RouterOS solutions. The initial rule accepts packets from now recognized connections, assuming They're Harmless to not overload the CPU. The second rule drops any packet that connecti