Their firewall is essentially iptables. If you can work iptables, you can work the routeros firewall.