About winbox official porn
Even though the firewall protects the router from the public interface, you should still choose to disable RouterOS services.A router might need DNS cache enabled, which decreases resolving time for DNS requests from clients to remote servers. In the event that DNS cache isn't expected on the router or another router is used for this kind of reason