incorporate chain=input in-interface=ether1 action=settle for protocol=tcp port=8291 comment="allow for Winbox"; add chain=enter in-interface=ether1 motion=accept protocol=tcp port=22 remark="allow SSH"; increase chain=enter in-interface=ether1 action=fall remark="block every thing else"; Make a single router as a community improve central issue, that could update MikroTik RouterOS on... https://trevorgrcmv.blogdiloz.com/29531052/getting-my-winbox-to-work