Ill be away for the week, so ill be doing the sniff when i get back, thanks for your reply.
The configuration i pasted on http://forum.mikrotik.com/t/rb760igs-tp-link-smart-switch-traffic-from-vlans-on-trunk-port-to-access-port-go-the-router-first/159961/1 is petty much complete, i only removed the L2TP users, some firewall port forwarding rules and some of the hotspot config.
There are more than 12 things connected, it just that some of them were power off at the moment i took the screen.
Im not using SPF from the router the SFP you see at the switch GUI is connected to a old broken 3Com smart switch that does not load the configuration after reboot, so it is working as a unmanagged switch, so port 28 is just configured as a access port for vlan 110, all the VOIP stuff is connected there.
And yeah i checked the port configuration as well.
I started learning VLANs when i started to use Mikrotik routers a few years ago. And i never noticed issues until now, for example i know that is best practice not to use untagged outside of access ports, right now the router is configured to have 4 trunks ports where all the VLANs are tagged but VLAN1 is still there as untagged, i know it should not be VLAN1 and everything should be tagged on the trunk port but as far as i know that is just a security thing, as im using vlan 1 for admin vlan, what is considered a bad thing to do.
Then i have one EAP with diferent wifi networks for each vlan that is connected directly to the router for two reasons, one the use is primary internet and two i wanted to block wifi access to some internal ips/ports of the same network. The CPE is also connected to the router for the same reason.
So i was not using the four ports on the switch that are configured as trunk (with the same configuration as the router) for anything else than conecting to the router and the router was just giving access ports for the vlans, pcs on the same vlan were able to send data to each other directly and everything i wanted to go to the router for firewall rules is connected to the router directly.
I was not until now that i connected something else on another trunk port on the switch that i noticed this weird behaviour. And its not the proxmox server, for example if i connect any pc there i first get the 192.168.90.x ip because thats the untagged vlan of the trunk port on id 1, then i go to the nic driver and set for example vlan id 140, then i get the correct 192.168.88.x ip i expect to be able to send data directly to pcs on access ports for vlan 140 directly whiout going outside the switch, but no, it goes to the router whiout giving me a tracert hop, its really wierd. Its almost as if the switch is sending all tagged trafic to its gateway or something.