Mikrotik

ip/firewall/filter

/ip firewall filter
add action=fasttrack-connection chain=forward connection-state=established,related,untracked
add action=fasttrack-connection chain=input connection-state=established,related,untracked
add action=drop chain=input src-address-list=Blacklist
add action=drop chain=forward src-address-list=Blacklist
add action=add-src-to-address-list address-list=Blacklist address-list-timeout=1d chain=input dst-port=21-79,81-442,444-800,8291,161 in-interface=ether1 protocol=tcp
add action=add-src-to-address-list address-list=Blacklist address-list-timeout=1d chain=input dst-port=21-66,69-122,124-442,444-800,8291,161 in-interface=ether1 protocol=udp
add action=accept chain=forward in-interface-list=LAN out-interface-list=WAN
add action=accept chain=forward connection-state=established,related,untracked
add action=drop chain=forward
add action=accept chain=input in-interface-list=LAN
add action=accept chain=input connection-state=established,related,untracked
add action=accept chain=input in-interface-list=Wireguard protocol=icmp
add action=drop chain=input