easiest way I found around this was the change the port number, those automated scanning tools only ever use the default ports, so just change your SSH, telnet ports to something different (say SSH=40022)
you can do this under /ip services
/ip firewall mangle add out-interface=ADSL action=change-mss new-mss=1400 chain=forward protocol=tcp tcp-flags=syn