Although the firewall shields the router from the public interface, you may still need to disable RouterOS products and services.A router may need DNS cache enabled, which decreases resolving time for DNS requests from clients to distant servers. In case DNS cache is not really necessary on the router or One more router is used for these functions,