But @anav always uses the modified variation of defconf that has those explicit rules at the bottom:
- allow LAN -> WAN
- allow DSTNAT
- drop all else
And in his config traffics between VLANs must be explicitly allowed.
Cases in point: Search results for '@anav drop all else' - MikroTik community forum
Example from search results: Help with vlans on RB5009 - RouterOS / Beginner Basics - MikroTik community forum