RouterOS makes use of stronger copyright for SSH, most newer plans use it, to show on SSH solid copyright: The 1st rule accepts packets from currently recognized connections, assuming They're safe not to overload the CPU. The second rule drops any packet that relationship tracking identifies