How to close port 2000 on microtik?

Question

Network routing

After reading the news about VPNFilter, I decided to close port 2000 - through which this bot climbs into the device. Tell me how to properly close this port and how to generally view the terminal of the OS router which ports are open. The firmware of the OS router is 6.36.

Answer 1

You need to close everything that is not explicitly allowed.
You must explicitly allow incoming (INPUT chain) packets from the local network, from trusted IP addresses for remote control, as well as packets related to already established connections. The rest is cutting.