Firewall/Mangle not working for bridge traffic?

RouterOS Beginner Basics
1

I am trying to mark local VoIP packets on RB951G-2HnD v6.29.1, but it looks like bridge traffic does not go through the firewall.

We have a PBX in a local network, and I would like to mark and prioritize VoIP packets in local network. All VoIP phones and and VoIP traffic is only in the local network 192.168.88.0/24, and PBX is on IP 192.168.88.99.

I have “use-ip-firewall” option enabled in bridge settings, but it looks like it does not work.

I even tried to add just some firewall log rules to catch traffic from and to PBX, but there is nothing in local network.

I tried the same with mangle and with firewall filter, but problem is the same. For example…

add action=log chain=forward log=yes log-prefix=Test1 src-address=192.168.88.99
add action=log chain=forward dst-address=192.168.88.99 log=yes log-prefix=Test2

This logs only NTP packets that are leaving the local network (bridge), but nothing is logged inside the bridge.

Why?

2

Bridge + Firewall seems broken after 6.28-29 for me.
Mikrotik struggle it in 6.30rcXX with variable success.
Look:
http://forum.mikrotik.com/t/fasttrack-new-feature-in-6-29/87517/164
http://forum.mikrotik.com/t/6-30-rc-final-fixes-before-release/89112/57

3

Try 6.27

4

I tried but without success http://forum.mikrotik.com/t/6-30-released/89427/158
I will retry nearest nights, can’t experiment with customers.
Now 6.31rc15 without Use IP Firewall, i.e. dumb Bridge.