/ip firewall filter add chain=input link-condition=recognized,connected action=take remark="settle for set up,relevant"; insert chain=input link-condition=invalid action=fall; incorporate chain=input in-interface=ether1 protocol=icmp action=settle for remark="make it possible for ICMP"; include chain=input in-interface=ether1 protocol=tcp port=8291 action=take comment="permit Winbox";... https://winbox11100.blogdeazar.com/27393398/the-smart-trick-of-winbox-that-no-one-is-discussing