RouterOS utilizes more robust copyright for SSH, most newer courses use it, to turn on SSH sturdy copyright: The initial rule accepts packets from by now set up connections, assuming These are safe to not overload the CPU. The 2nd rule drops any packet that connection tracking identifies as inval