Quick scan:
/interface bridge vlan
add bridge=bridge1 tagged=bridge1,ether1,vlan10,vlan20,vlan30 vlan-ids=10,20,30
Should be:
/interface bridge vlan
add bridge=bridge1 tagged=bridge1, vlan-ids=10,20,30
Only tagged ports should be added.
This can be removed:
# Allow User1 (VLAN10) to access devices behind User1
add action=accept chain=forward in-interface=vlan10 out-interface=vlan10
# Drop inter-VLAN traffic (except allowed above)
add action=drop chain=forward in-interface=vlan20 out-interface=vlan10
add action=drop chain=forward in-interface=vlan20 out-interface=vlan30
add action=drop chain=forward in-interface=vlan30 out-interface=vlan10
add action=drop chain=forward in-interface=vlan30 out-interface=vlan20
And add:
# Drop all other input
add action=drop chain=forward
Have a look at this great topic please:
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1