Hi @kanwhoa and welcome to the Mikrotik user forum!
Thanks for the detailed post but a few things are a bit unclear though:
You mention “full access between all bridge ports”, but also describe firewall filtering between trusted and untrusted bridges. That sounds contradictory unless you mean full access within each bridge only, and routing/firewall between them.
It would really help if you could clarify the setup with:
- A simple network topology diagram or description (ascii, hand-drawn on a napkin etc)
- A sanitized full /export (remove sensitive stuff like passwords, crypto keys, serial number public IPs etc.). Check this how-to guide.
That way it’s easier to understand exactly how traffic is flowing and where connection tracking might break down.