oh damn... I'm gonna have to go through this later... coming up on 5am here. I've never used Microtik. I've got Palos, Fortigates, and Edgerouters... but my whole philosophical goal is to offer nothing publically. I want my first ingress to anything be the VPN connection, and that's it. Once you're in the network it's still "zero trust" marketing hoo rah, but you control the network. I have to if I want to protect my family and friends behind it.