Even though the firewall guards the router from the public interface, you should still would like to disable RouterOS services.The primary rule accepts packets from presently established connections, assuming they are Harmless not to overload the CPU. The second rule drops any packet that connection monitoring identifies as invalid. Following that,