Although the firewall safeguards the router from the general public interface, you may still desire to disable RouterOS services. The first rule accepts packets from previously established connections, assuming They may be Harmless to not overload the CPU. The 2nd rule drops any packet that link