In interface on your nat rule are set to all interface. It should only be your outside interface.
Do not post image in other sites, click Attachments under the post and add image to the forum.
Do post your config /export hide-sensitive
remove serial
\
Use Splunk> to log/monitor your MikroTik Router(s).–> MikroTik->Splunk 
Backup config to Gmail → Backup
Block users that tries ut use non open ports → Block