Also, clients won’t connect to 127.0.0.1 as DNS server, remove that IP from /ip dhcp-server network:
/ip dhcp-server network
add address=80.144.1.0/24 comment="Network for VLAN600" dns-server=100.48.48.1,127.0.0.1,8.8.8.8 gateway=80.144.1.1 netmask=24
add address=80.144.10.0/24 comment="Network for VLAN630" dns-server=100.48.48.1,127.0.0.1,8.8.8.8 gateway=80.144.10.1 netmask=24
add address=80.144.20.0/24 comment="Network for VLAN638" dns-server=100.48.48.1 gateway=80.144.20.1 netmask=24
add address=80.144.30.0/24 comment="Network for VLAN646" dns-server=100.48.48.1 gateway=80.144.30.1 netmask=24
add address=80.144.40.0/24 comment="Network for VLAN654" dns-server=100.48.48.1 gateway=80.144.40.1 netmask=24
add address=80.145.50.0/24 comment="Network for VLAN662" dns-server=100.48.48.1 gateway=80.145.50.1 netmask=24
add address=80.145.80.0/24 comment="Network for VLAN710" dns-server=100.48.48.1,127.0.0.1,8.8.8.8 gateway=80.145.80.1 netmask=24
Though possible, leave bridges pvid=1:
/interface bridge
add comment="Master Bridge with VLAN Filtering Enabled" name=CRS328-Master-Bridge pvid=600 vlan-filtering=yes
As spf1 is your WAN interface, have it removed from the bridge:
/interface bridge port
add bridge=CRS328-Master-Bridge comment="Add sfp1 to Bridge" interface=sfp1 pvid=630
Still looking through the firewall filter rules (and their order)…
If you want to know a bit more about VLAN, please have a look at this great topic:
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1