Check the following topic, it looks related: http://forum.mikrotik.com/t/tcp-session-connection-tracking-bug/99283/1