If you need to isolate clients, don't use netmask hacks. Just prevent stations from passing traffic to one another, which is very simple to do in wireless networks.
http://wiki.mikrotik.com/wiki/Manual:In ... properties
default-forwarding (yes | no; Default: yes) This is the value of forwarding for clients that do not match any entry in the access-list
Setting default-forwarding on the wireless interface to 'no' means that unless clients are overridden via access-lists they cannot pass traffic between each other directly on the hardware of the wireless interface. Combine that with an IP firewall rule in the 'forward' chain that prevents same network traffic between stations and you've successfully isolated stations from one another. Such an IP firewall rule would look like this:
/ip firewall filter
add chain=forward src-address=172.0.0.0/24 dst-address=172.0.0.0/24 action=drop
I'd also like to stress again that you should only be using RFC1918 address space (private IP addresses) unless you've been assigned public IPs from your local RIR. 172.0.0.0/24 is NOT a private IP address. You should renumber your network.