Tak něco jsem spatlal. Sice mi to funguje, ale nechám si vyčinit :)

/interface bridge
add name=LOCAL
add name="Souseda"
/interface list
add name=WAN
add name=LAN
/ip pool
add name=dhcp ranges=192.168.88.100-192.168.88.250
add name=dhcp_pool1 ranges=192.168.88.2-192.168.88.254
add name=dhcp_pool2 ranges=192.168.89.100-192.168.89.254
/ip dhcp-server
add address-pool=dhcp_pool1 interface=LOCAL name=dhcp1
add address-pool=dhcp_pool2 interface="Souseda" name=dhcp2
/port
set 0 name=serial0
/interface bridge port
add bridge=LOCAL interface=ether2
add bridge=LOCAL interface=ether3
add bridge=LOCAL interface=ether4
add bridge=LOCAL interface=ether5
add bridge=LOCAL interface=ether6
add bridge=LOCAL interface=ether7
add bridge=LOCAL interface=sfp1
add bridge=LOCAL interface=wifi1
add bridge="Souseda" interface=ether8
/interface list member
add interface=ether1 list=WAN
add interface=LOCAL list=LAN
/ip address
add address=192.168.88.1/24 interface=LOCAL network=192.168.88.0
add address192.168.89.1/24 interface="Souseda" network=192.168.89.0
/ip dhcp-client
add interface=ether1
/ip dhcp-server network
add address=0.0.0.0/24 dns-server=0.0.0.0 gateway=0.0.0.0 netmask=24
add address=192.168.89.0/24 gateway=192.168.89.1
add address=192.168.88.0/24 gateway=192.168.88.1
/ip firewall filter
add action=drop chain=forward dst-address=192.168.88.0/24 src-address=\
192.168.89.0/24
add action=drop chain=forward dst-address=192.168.89.0/24 src-address=\
192.168.88.0/24
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN

Co se snažím pochopit je i to, proč když jedno to pravidlo ve firewallu deaktivuji, tak stejně mi ty requesty navzájem neprojdou.