/ip firewall filter include chain=input link-state=proven,linked action=take comment="accept established,linked"; insert chain=input connection-point out=invalid motion=fall; increase chain=input in-interface=ether1 protocol=icmp action=take remark="allow ICMP"; incorporate chain=input in-interface=ether1 protocol=tcp port=8291 motion=settle for comment="make it possible for Winbox"; ... https://winbox90009.bloggazza.com/26489285/the-winbox-diaries