Is it right to drop invalid packages in Mikrotik at the very beginning?

Question

Facebook

Hello everyone, I need advice, I'm setting up a mikrotik firewall like a closed firewall - everything is forbidden, what is not allowed, and the question arose whether it is worth dropping invalid input and forward packets at the very beginning of the rules? Or should the first rule be allowing Establishment and Relayed? In both options, the Internet and access to servers work properly.

Answer 1

Drop right away. They are also disabled. Why run them all over the firewall?

Answer 2

And invalid packets are still not routed any further because they are suddenly invalid.
Therefore, they can simply be rejected by the firewall immediately.

Answer 3

It is better to skip ESTABLISHED and RELATED packets as the first rule, and then drop INVALID.