I think there's a lot of reasons people wouldn't want to do that though.Simple: do not use the resolver in the MikroTik for clients, but let them directly use 220.127.116.11 or 18.104.22.168 or similar.
(advertised via DHCP)
<clarify differences>1) Upgrade to 6.38.5 fixes the botnet scanner and removes it. <cite specific article>
2) Upgrade to 6.41.3 fixes SMB vulnerability. <cite specific article>