Follow parrini’s advice here: http://forum.mikrotik.com/t/can-connection-tracking-be-disabled/23241/1
-Louis