The best practice is to produce a new person with a strong password and disable or eliminate the default admin person.  incorporate chain=enter in-interface=ether1 action=settle for protocol=tcp port=8291 comment="let Winbox"; increase chain=enter in-interface=ether1 action=accept protocol=tcp port=22 comment="permit SSH"; add chain=input in-inte