⚠ Review before deploying. These are correct, commonly-used RouterOS templates — not a substitute for understanding your own topology. Test on a non-production router or via Winbox terminal before relying on any rule, especially NAT / VPN / management-access rules that could lock you out.