Best practice re: Opnsense and packages you are not using

[tre4bax]

I have a few options that come as standard with opnsense that I am not using, nor planning to use.

for example DynamicDNS, DNSMasq, OpenDNS etc.

Is best practice to leave these alone as they will get automatic updates and stuff ongoing?  Or is it to remove stuff that you are not using to release memory and drive space used?  The later is obviously easier.  Having unused software on my router though seems unnecessary and a potential route for malware if I'm not actually using it so don't notice issues.

What does everyone else do?

[fabian]

If you disable dnsmasq, it will not run and is therefore only bloat on the HDD but not a security risk. DynamicDNS is a plugin which is installed by default because many users expected it to be still here. It may be uninstalled. For OpenDNS I cannot tell you what exactly is the case but it is probably not removable from core without extracting it to its own plugin which needs some core changes.