You only have two vlans defined or I should state only two with DHCP serving capacity on the router.
200 and 201???
Where should we assume vlans 10, 20, 100 are coming from???
If this is a five port unit, why is the ISP (assuming ether1) included in the bridge??
So I see all bridge ports are carrying vlan201, what happened to vlan200??
I see you have at least given the mgnmt vlan an address, but missing the rest of the required info.
I see now that vlan10 and 20 are WAN side vlans??
Okay you really need to draw a network diagram. Its not clear if this device is hooked up to an ISP directly or via another router for example.
Your firewall rules are not SAFE or complete and cannot advise further.
Suggest you read this after putting default firewall rules in place…
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1