Ports with disabled HWOffloading isolated from network?

Hello everyone new to mikrotik,
Coming from consumer routers flashed with 3rd party firmware so not afraid to get my hands dirty.
I’m an owner of a rb4011 initial setup via quickset (I know avoid using quickset I’ll get there one day)
I disabled hardware offloading on ports 7-10
port 6 is the only port with hardware offloading enabled
wan is port 1
sfp+ 2-5 ports are disabled
bridge has fast-forward enabled
somehow all the ports with hardware offloading disabled are isolated and cannot make client to client connections but they still retain internet access
if I toggle hardware offloading on and off on ports 7-10 intranet connections work for a couple days

Can any routeros wizard please help figure out how to get intranet access to ports 7-10 with hardware offloading disabled?

It must be something so simple I cant figure it out.

Thanks any help is greatly appreciated!