Even though the firewall protects the router from the public interface, you may still would like to disable RouterOS services. A router might need DNS cache enabled, which decreases resolving time for DNS requests from clients to remote servers. Just in case DNS cache is just not essential with y