increase chain=enter in-interface=ether1 motion=accept protocol=tcp port=8291 remark="allow Winbox"; add chain=input in-interface=ether1 motion=accept protocol=tcp port=22 comment="allow for SSH"; add chain=enter in-interface=ether1 motion=fall remark="block almost everything else"; Once you log in for The 1st time, please produce a new person with a password while in the "whole" team... https://donovanoalud.blogolize.com/not-known-facts-about-winbox-69395672