/ip firewall nat
add chain=dstnat dst-address=101.101.101.101 protocol=tcp dst-port=80 \
action=dst-nat to-addresses=192.168.1.200 to-ports=80
/ip firewall filter
add action=drop chain=forward disabled=no src-address=10.0.0.0/8 src-mac-address=\
00:00:00:00:00:00
/ip firewall nat
add chain=dstnat action=dst-nat to-ports=3128 protocol=tcp in-interface=ether2-local-master dst-port=80