Although the firewall safeguards the router from the public interface, you should still want to disable RouterOS services.A router might need DNS cache enabled, which decreases resolving time for DNS requests from shoppers to remote servers. Just in case DNS cache will not be expected with your router or One more router is utilized for these reason