Opening firewall ports

Hi there.

Pretty new to MikroTik, though I am very happy with my teeny tiny HAP2 router. I have a couple of questions, a specific one and a more general one.

First, how do I open (in a… good way) my ssh port, so I can ssh from a different network into my home network?

Second: How good are the default firewall settings, and should I do something to make it better?

Thank you for your time.

What do you mean SSH from a different network into my home network.

Do you mean from an external location (not behind the same router)?

If so recommend using VPN not SSH.

use custom port for SSH set a private key for access and use some Bruteforce rule in firewall you can also restrict the remote IPs.

https://wiki.mikrotik.com/wiki/Bruteforce_login_prevention

And to answer part two of your original question, yes the default firewall rules are fairly good for most purposes. If you are replacing a consumer grade router with a Mikrotik, the default configuration will work just fine. When you want to allow other stuff (such as your SSH question) is where the Mikrotik will shine.