A.2
Right now you have your SFP added to bridge.
If you want to set it as WAN you have first to remove it from bridge (thus making it self-standing).
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge comment=defconf interface=wlan2
add bridge=bridge interface=ether5
Then you need to categorize it as WAN:
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add comment=myconf interface=sfp1 list=WAN
Side note:
by pasting the configuration on the board, the parser highlioghted that you have a wrong setting (red, prepended by #):
# no interface
add action=accept chain=input connection-state=established,new in-interface=\
!*E src-address=10.10.10.0
The rule of the thumb is that whenever there is an * (asterisk) in a configuration it means that there is a reference to something that doesn’t exist anymore (deleted or renamed), see point #21 here:
. http://forum.mikrotik.com/t/gp-csa-for-mikrotik-devices/182176/1