How to selectively provide DNS resolution services?

To be picky, more than “a bad habit” having not a proper firewall on a router directly connected to the internet is what we highly specialized technicians :wink: call “a recipe for disaster” :open_mouth: , Rule #8:
http://forum.mikrotik.com/t/the-twelve-rules-of-mikrotik-club/182164/1