/ip firewall mangle add chain=prerouting src-address-list=CLIENTESA1 dst-address-list=!MYIPS action mark-routing new-routing-mark=ADSL1 ...
Yes that's right.So if I ping 10.10.1.x having a source address 10.10.2.x,
the process adopted by MikroTik will send to the default route 10.10.2.x, not
10.10.1.x send directly through the interface, as a directly connected route?
Yes I agree.Which setting are you changing on them? The best solution is mentioned above, change AP setting to AES. This will increase speed, reduce load, and increase security ... and also solve any Apple problems.
i think best way is you change all of the mangles with chain prerouting.Do I have to change the first three rules (routing-mark)? Or all the other rules (ping, rdp, pop3, ...)?
/interface wireless set 0 security-profile=profile1