Although the firewall shields the router from the public interface, you should still would like to disable RouterOS providers. Be sure to watch out to put the /24 after the IP handle. If you do not try this, the router is not going to notify you that you simply designed a miscalculation for the r