External proxy server and mikorik

Hello ,
I’m trying to run an external proxy with mikrotik WiFI
the AP is bridge (wlan+ether1):10.0.0.1/24
DHCP pool is 10.0.0.10-10.0.0.30
route 0.0.0.0/0 → 10.0.0.250
everything is working just fine , have internet access.

now I want to connect the proxy server (I’m trying to use WinGate V9)
10.0.0.249/24 DG-10.0.0.250
(have internet access)

this is what I have done in the AP unit

/ip firewall nat
add action=dst-nat chain=dstnat comment="To Proxy" dst-port=80,443  in-interface=bridge1 protocol=tcp to-addresses=10.0.0.249 to-ports=3122
add action=masquerade chain=srcnat src-address=10.0.0.0/24

but I get in the proxy “access deny!” in the browser.

what am I missing?

do I need to setup something also in the 10.0.0.250? (it’s also mikrotik router)?

If I take a simple switch and connect it to the Proxy+AP+Computer , and setup in the explorer proxy setting - 10.0.0.249 port 3122
everyting is working great , without any problems
so it’s not a proxy issue ( I’m almost sure..)

?

Thanks ,