The default configuration firewall rules are safe and good to go.
If you start changing them or the config all bets are off.
What can be said is
a. dont use default user ID "Admin", add your own with full permissions and then remove the admin one but write all info down in a safe place.
b. make a strong password
c. recommend changing winbox port to a random high number port
d. set tools MAC, server MAC server interface to NONE
e. set tools MAC WINBOX mac server interface to LAN
f. turn services off except winbox....
Dont be afraid to ask questions here..................
Hello Anav, thank you and I really appreciate your help I am using the default configuration firewall rules and I did your steps a, b, e only step c: How can I change winbox port to a random high number port? How to set that in winbox? step d:How to set tools MAC, server MAC server interface to NONE? step f:How to turn services off except winbox.. ? And I have a question about step e , does this step prohibit me and others to login to the router through the network but allow me only to access the router when I'm at my home( LAN) only ? Is that right?