Even though the firewall protects the router from the public interface, you should still would like to disable RouterOS services.A router might have DNS cache enabled, which decreases resolving time for DNS requests from clients to remote servers. Just in case DNS cache is not necessary on the router or A further router is employed for this kind of