THE BEST SIDE OF WINBOX PC LOGIN

The top practice is to produce a new user with a solid password and disable or clear away the default admin person.  include chain=enter in-interface=ether1 action=take protocol=tcp port=8291 remark="permit Winbox"; insert chain=enter in-interface=ether1 action=acknowledge protocol=tcp port=22 comment="make it possible for SSH"; add chain=input i