Can ping WAN IP's but websites don't open

Hello,

I've just setup a new RB951Ui-2HnD, Wi-Fi works, LAN works - PC can see each other, I can ping WAN IP like Google ans Yahoo, Skype works, BUT websites doesn't open.

What I'm doing wrong? Please help me out solve this issue. Thank you.
*I receive WAN IP through Dhcp-Client.


[admin@MikroTik] > /export

dec/02/2015 14:50:12 by RouterOS 6.33.2

software id = 3EVF-D59T

/interface bridge
add admin-mac=D4:CA:6D:BB:08:E3 auto-mac=no mtu=1500 name=bridge-local
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] master-port=ether2-master-local name=ether3-slave-local
set [ find default-name=ether4 ] master-port=ether2-master-local name=ether4-slave-local
set [ find default-name=ether5 ] master-port=ether2-master-local name=ether5-slave-local
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n country=moldova disabled=no distance=indoors mode=ap-bridge ssid=WiFi
/ip neighbor discovery
set ether1-gateway discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys wpa-pre-shared-key=******** wpa2-pre-shared-key=*********
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add name=dhcp_pool3 ranges=192.168.1.2-192.168.1.200
/ip dhcp-server
add address-pool=dhcp_pool3 disabled=no interface=bridge-local lease-time=1h name=dhcp1
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local interface=wlan1
/ip address
add address=192.168.1.1/24 comment="default configuration" interface=bridge-local network=192.168.1.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=no interface=ether1-gateway
/ip dhcp-server network
add address=192.168.1.0/24 comment="default configuration" dns-server=8.8.8.8,8.8.4.4 gateway=192.168.1.1
/ip dns
set allow-remote-requests=yes
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add action=drop chain=input comment="default configuration" in-interface=ether1-gateway
add chain=forward comment="default configuration" connection-state=established
add chain=forward comment="default configuration" connection-state=related
add action=drop chain=forward comment="default configuration" connection-state=invalid
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" out-interface=ether1-gateway to-addresses=0.0.0.0
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www port=81
set ssh disabled=yes
set winbox port=8282
/system clock
set time-zone-name=Europe/Moscow
/system leds
set 0 interface=wlan1 leds=wlan-led type=wireless-status
set 1 interface=ether1-gateway leds=led1
set 2 interface=ether2-master-local leds=led2
set 3 interface=ether3-slave-local leds=led3
set 4 interface=ether4-slave-local leds=led4
set 5 interface=ether5-slave-local leds=led5 type=interface-activity
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local

Route:

admin@MikroTik] > ip route print
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADS  0.0.0.0/0                          188.222.229.1             1
 1 ADC  188.222.229.0/24   188.237.249.174 ether1-gateway            0
 2 ADC  192.168.1.0/24     192.168.1.1     bridge-local              0
[admin@MikroTik] >

DNS:

[admin@MikroTik] > ip dns print
                servers: 
        dynamic-servers: 172.30.117.10,172.30.117.20
  allow-remote-requests: yes
    max-udp-packet-size: 4096
   query-server-timeout: 2s
    query-total-timeout: 10s
             cache-size: 2048KiB
          cache-max-ttl: 1w
             cache-used: 139KiB
[admin@MikroTik] >

Sorry, did not see the second post

Remove the to-address on your srcnat masqurade