I began to understand, tests continue ... But why downloading *.mp4 from youtube is allowed? In rule text - extension *.mp4 present.It will block any page that mentions ".dat" in it's text. Not just the downloads.
with chain=forward connections marks fine. Not with tcp-services, other-services.Also try the basic to add a new connection mark that is simple at the top in mangle. If it works or not.