I have no clue what you just said or recommended.
Set bridge to vlan-filtering=yes works and causes no issues.
If you want to be anal and correct
then assign ingress filtering on every bridge port (except hybrid ports)
then assign frame types allowed specific to trunk ports and access ports ( hybrid gets all frames).
Nothing ambiguous about that and as per pcunite’s advice - http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
My question yet unanswered to any satisfaction is what about the ingress filtering checkbox on the bridge
a. should that be checked.
b. what does it do
c. how is it related to ingress filtering on each /interface bridge port line.