I can have address list filled dynamically by dns name resolution and use this list in firewall rules.
But currently I don't have ability to limit ip service (such as winbox or ssh) to be available only to dns name -- only to IP address/IP subnet.
So suppose I have a dynamic IP for place I want to connect to Mikrotik device from. I can make a firewall rule to allow this, but I can't allow this in IP service list, so the only option is to allow this from everywhere -- not the best choice, IMHO, from security point of view. Is it possible to add this ability in future releases?