2.9 Walled Garden alternatives. HTTPS support is not working

I’m trying to get HTTPS working with Walled Garden.
On some routers it works, on others I get “page can not be displayed” for all clients. The HTTPS walled garden support is not working well.

So I am trying to set up firewall/mangle/nat rules to allow to get out to the HTTPS server without using Walled Garden. The other howto’s I’ve read do not work for 2.9

http://forum.mikrotik.com/t/how-to-access-to-https-server-without-login-to-hotspot/963/1

I’m trying to mark packet/connection as hs-auth with no luck. Also tried jumping to hs-auth chain with no luck.

Help!

HTTP-level Walled Garden may fail for https, if dns cache on hotspot server
contains multiple dns names for the same IP address. Try IP-level Walled
Garden instead:

/ip hotspot walled-garden ip add dst-host=some.https.site protocol=tcp
dst-port=443 action=accept