Protect a port from my guest WiFi

Yeah your config is a bloated mess and 1/2 implementing many things like bridge ports filtering etc.
For example how you can you set more than one dhcp service per port interface…boggles my mind.

Suggestion.
a. download new firmware (long term 6.46.8 )
b. dump your current config save what you need for vpn
c. add back in default firewall rules.
d. implement bridge ports and bridge vlan filtering using this reference.
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

Then come back here and go from there…