insert chain=input in-interface=ether1 action=take protocol=tcp port=8291 remark="allow for Winbox"; insert chain=input in-interface=ether1 action=take protocol=tcp port=22 remark="let SSH"; insert chain=enter in-interface=ether1 motion=fall comment="block anything else"