Although the firewall protects the router from the general public interface, you may still wish to disable RouterOS services.A router may need DNS cache enabled, which decreases resolving time for DNS requests from clients to distant servers. In the event DNS cache will not be needed on the router or One more router is employed for such application