Setting any IP service to be available from 192.168.101.0/28 is blocking that service altogether, even when when trying to access it from that network (255.255.255.240)
It works as expected when setting it to another /24 network, limiting access to that network only.
I noticed that when I entered the address 192.168.101.0 in ip services without the subnet it automatically added /30 (in winbox). The mikrotik sits on 192.168.101.241/28