One of those days i guess..
Cable replacement solved all issues.
Its seems this DMZ actually does what it saysYou mean there is another router (provide by ISP?) before the mikrotik? If so see if that router can set to "bridge mode"
sometime DMZ won't solve double nat problem