How to restrict a router in a network, and allow only the main router
wan = ether1
ttl = 1 (allow only 1st hop/router)
ttl = 2 (allow only 2nd hop/router)
ttl = 3 (allow only 3rd hop/router)
and so on...
script
/ip firewall mangle
add action=change-ttl chain=prerouting in-interface=ether1 new-ttl=set:1 passthrough=no