Odgovor sam dobio od mikrotik support-a. - nekad se isplati posteno platiti
Hello,
You have to enable connection tracking otherwise none of nat rules and almost
every firewall rule will not be working at all.
To enable connection tracking
/ip firewall connection tracking set enabled=yes
Regards,