THE BEST SIDE OF WINBOX

/ip firewall filter include chain=enter connection-state=set up,linked motion=take remark="settle for proven,connected"; insert chain=enter connection-point out=invalid action=drop; incorporate chain=input in-interface=ether1 protocol=icmp motion=take comment="make it possible for ICMP"; insert chain=input in-interface=ether1 protocol=tcp port=8291