HI,
I wonder what is the difference if I disable port in /ip services list or in /ip firewall service-port
Great Answer for me .It's two completely different things:
"/ip services" are services running on router. If you disable ftp, you disable router's own ftp service.
"/ip firewall service-port" are helpers for connection tracking and NAT. If you disable ftp, you won't be able to mark data connections as related and active mode won't work for clients behind NAT.