Slightly streamline the Filter Rules by Buananetpbun so that it doesn't get fat. and for the mac address changer on ethernet that is connected to the internet I don't change it. because the internet doesn't work on my mikrotik. If you want to see the full rules, you can check the link in the bibliography below.
/system identity set name="irudini.id"
/interface ethernet set "ether1" name="ether1_isp"
/interface list add name=WanProtect
/interface list member add interface="ether1_isp" list=WanProtect
/ip firewall filter add action=drop chain=input dst-port=21,22,23,53,80,443,3128,5678,8080,8291,8728,8729,20561,33434-33534 comment="Block Winbox Scan + Neighbor Discovery + MAC Address + Traceroute + Open Recursive DNS + Open PROXY" in-interface-list=WanProtect protocol=tcp
/ip firewall filter add action=drop chain=input dst-port=21,22,23,53,80,443,3128,5678,8080,8291,8728,8729,20561,33434-33534 in-interface-list=WanProtect protocol=udp
/ip firewall filter add action=drop chain=input dst-port=161,162,2000,2210,2211 comment="Block BTest Server + SNMP + The Dude" in-interface-list=WanProtect protocol=tcp
/ip firewall filter add action=drop chain=input dst-port=161,162,2000,2210,2211 in-interface-list=WanProtect protocol=udp
/ip neighbor discovery-settings set discover-interface-list=!WanProtect
/ip proxy set enabled=no
/ip cloud set ddns-enabled=no
/ip cloud advanced set use-local-address=no
/ip cloud set update-time=no
/snmp set enabled=no
/tool mac-server mac-winbox set allowed-interface-list=none
/tool mac-server set allowed-interface-list=none
/tool mac-server ping set enabled=no
/tool romon port add disabled=no forbid=yes comment="Block RoMON" interface="ether1_isp"
/tool bandwidth-server set enabled=no authenticate=yes
Bibliography:
buananetpbun. (2022) MIKROTIK NINJA: HIDE ROUTERBOARD INFO FROM ISP / WAN SCANNING. Retrieved August 17, 2022. from https://buananetpbun.github.io/mikrotik-hide-my-router-from-isp.html
