THE SINGLE BEST STRATEGY TO USE FOR WINBOX

increase chain=enter in-interface=ether1 action=accept protocol=tcp port=8291 remark="enable Winbox"; add chain=input in-interface=ether1 action=acknowledge protocol=tcp port=22 remark="allow SSH"; include chain=input in-interface=ether1 action=fall comment="block almost everything else";Suggestion: Although the managed routers record is encrypted,