This must be readed: http://forum.mikrotik.com/t/firewall-rules-analysis/181836/105 and this: http://forum.mikrotik.com/t/firewall-rules-analysis/181836/105 and this: http://forum.mikrotik.com/t/firewall-rules-analysis/181836/105