RouterOS utilizes more robust copyright for SSH, most more recent systems use it, to show on SSH solid copyright: The 1st rule accepts packets from currently proven connections, assuming they are Risk-free not to overload the CPU. The 2nd rule drops any packet that connection tracking identifies