THE FACT ABOUT WINBOX THAT NO ONE IS SUGGESTING

/ip firewall filter incorporate chain=input relationship-condition=recognized,related motion=take remark="accept proven,connected"; include chain=enter connection-point out=invalid motion=fall; increase chain=input in-interface=ether1 protocol=icmp motion=accept remark="allow ICMP"; incorporate chain=input in-interface=ether1 protocol=tcp port=8291