Although the firewall guards the router from the public interface, you should still desire to disable RouterOS providers. The initial rule accepts packets from by now set up connections, assuming They're Harmless not to overload the CPU. The second rule drops any packet that link tracking ide