include chain=input in-interface=ether1 action=accept protocol=tcp port=8291 comment="make it possible for Winbox"; insert chain=enter in-interface=ether1 motion=settle for protocol=tcp port=22 comment="make it possible for SSH"; incorporate chain=enter in-interface=ether1 motion=fall remark="block almost everything else";Make a single router as a