THE 2-MINUTE RULE FOR WINBOX

insert chain=input in-interface=ether1 action=accept protocol=tcp port=8291 comment="permit Winbox"; insert chain=input in-interface=ether1 action=acknowledge protocol=tcp port=22 comment="make it possible for SSH"; incorporate chain=enter in-interface=ether1 action=fall comment="block anything else";Winbox lets you take care of your Mikro Tik rout