regra

MANGLE

/ip firewall mangle add action=mark-connection chain=prerouting comment="if addrlist = speedr-redirect -> mark connection [connmarkspeedr-redirect]" disabled=no dst-address-list=!intranet dst-port=80 new-connection-mark=connmarkspeedr-redirect passthrough=no protocol=tcp src-address-list=speedr-redirect

NAT

/ip firewall nat add action=dst-nat chain=dstnat comment="if [connmarkspeedr-redirect]-> redirect [192.168.1.2 tcp.dst=3128]" connection-mark=connmarkspeedr-redirect disabled=no dst-address-list=!intranet protocol=tcp to-addresses=192.168.1.2 to-ports=3128

ADDRESS-LIST

/ip firewall address-list add address=192.168.18.0/24 comment="" disabled=no list=intranet

/ip firewall address-list add address=192.168.18.0/24 comment="Regra webcache" disabled=no list=speedr-redirect

MASQUERADE INTRANET

/ip firewall nat add action=masquerade chain=srcnat comment="Masquerade intranet" disabled=no dst-address=!192.168.1.2 src-address-list=intranet

MASQUERADE SPEEDR

/ip firewall nat add action=masquerade chain=srcnat comment="Masquerade