/ ip firewall filter 
add chain=input protocol=tcp dst-port=8291 connection-limit=2,32 \
connection-state=established action=add-src-to-address-list \
address-list="drop winbox" address-list-timeout=12h comment="" \ disabled=no 
add chain=input protocol=tcp dst-port=80 connection-limit=2,32 \
connection-state=established action=add-src-to-address-list \
address-list="drop winbox" address-list-timeout=12h comment="" disabled=no 
add chain=input src-address-list="drop winbox" action=drop comment="" \
disabled=no 
