Order of the rules is important, post all of the configuration not just small extracts.
Also do you know why bridge-local has to be added as tagged in > /interface bridge vlan > ?
That is the implicit bridge-to-CPU port which provides access from all of the other bridge ports to IP resources (e.g. DHCP, routing, etc.) on the Mikrotik itself, see http://forum.mikrotik.com/t/routeros-bridge-mysteries-explained/147832/1