The configuration is:
/Interface
# feb/02/2012 18:37:29 by RouterOS 5.11
#
/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \
disabled=no forward-delay=15s l2mtu=1522 max-message-age=20s mtu=1500 \
name=bridge1 priority=0x8000 protocol-mode=none transmit-hold-count=6
/interface ethernet
set 0 arp=enabled auto-negotiation=yes disabled=no full-duplex=yes l2mtu=1526 \
mac-address=00:0C:42:B9:C2:FD mtu=1500 name=eth1-ADSL speed=100Mbps
set 1 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited \
disabled=no full-duplex=yes l2mtu=1522 mac-address=00:0C:42:B9:C2:FE \
master-port=none mtu=1500 name=eth2-Lan speed=100Mbps
set 2 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited \
disabled=yes full-duplex=yes l2mtu=1522 mac-address=00:0C:42:B9:C2:FF \
master-port=none mtu=1500 name=ether3 speed=100Mbps
/interface ethernet switch
set switch1 mirror-source=none mirror-target=none name=switch1
/interface wireless security-profiles
set default authentication-types=wpa2-psk group-ciphers=tkip,aes-ccm \
group-key-update=5m interim-update=0s management-protection=disabled \
management-protection-key="" mode=dynamic-keys name=default \
radius-eap-accounting=no radius-mac-accounting=no \
radius-mac-authentication=no radius-mac-caching=disabled \
radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=\
none static-key-0="" static-key-1="" static-key-2="" static-key-3="" \
static-sta-private-algo=none static-sta-private-key="" \
static-transmit-key=key-0 supplicant-identity=MikroTik tls-certificate=\
none tls-mode=no-certificates unicast-ciphers=tkip,aes-ccm \
wpa-pre-shared-key="" wpa2-pre-shared-key="anchora_E815-&\$"
/interface wireless
set 0 adaptive-noise-immunity=none allow-sharedkey=no antenna-gain=0 area="" \
arp=enabled band=2ghz-b/g/n basic-rates-a/g=6Mbps basic-rates-b=1Mbps \
bridge-mode=enabled channel-width=20mhz compression=no country=italy \
default-ap-tx-limit=0 default-authentication=yes default-client-tx-limit=\
0 default-forwarding=yes dfs-mode=none disable-running-check=no disabled=\
no disconnect-timeout=3s distance=dynamic frame-lifetime=0 frequency=2437 \
frequency-mode=manual-txpower frequency-offset=0 hide-ssid=no \
ht-ampdu-priorities=0 ht-amsdu-limit=8192 ht-amsdu-threshold=8192 \
ht-basic-mcs=mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7 \
ht-guard-interval=any ht-rxchains=0 ht-supported-mcs="mcs-0,mcs-1,mcs-2,mc\
s-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,mcs-11,mcs-12,mcs-13,mcs-14\
,mcs-15" ht-txchains=0 hw-fragmentation-threshold=disabled \
hw-protection-mode=none hw-protection-threshold=0 hw-retries=7 l2mtu=2290 \
mac-address=00:0C:42:66:F7:4A max-station-count=2007 mode=ap-bridge mtu=\
1500 name=wlan1 noise-floor-threshold=default nv2-cell-radius=30 \
nv2-noise-floor-offset=default nv2-preshared-key="" nv2-qos=default \
nv2-queue-count=2 nv2-security=disabled on-fail-retry-time=100ms \
periodic-calibration=default periodic-calibration-interval=60 \
preamble-mode=both proprietary-extensions=post-2.9.25 radio-name=\
000C4266F74A rate-selection=advanced rate-set=default scan-list=default \
security-profile=default ssid=wStudioA station-bridge-clone-mac=\
00:00:00:00:00:00 supported-rates-a/g=\
6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps supported-rates-b=\
1Mbps,2Mbps,5.5Mbps,11Mbps tdma-period-size=2 tx-power-mode=default \
update-stats-interval=disabled wds-cost-range=50-150 wds-default-bridge=\
bridge1 wds-default-cost=100 wds-ignore-ssid=no wds-mode=dynamic \
wireless-protocol=802.11 wmm-support=disabled
/interface wireless manual-tx-power-table
set wlan1 manual-tx-powers="1Mbps:17,2Mbps:17,5.5Mbps:17,11Mbps:17,6Mbps:17,9M\
bps:17,12Mbps:17,18Mbps:17,24Mbps:17,36Mbps:17,48Mbps:17,54Mbps:17,HT20-0:\
17,HT20-1:17,HT20-2:17,HT20-3:17,HT20-4:17,HT20-5:17,HT20-6:17,HT20-7:17,H\
T40-0:17,HT40-1:17,HT40-2:17,HT40-3:17,HT40-4:17,HT40-5:17,HT40-6:17,HT40-\
7:17"
/interface wireless nstreme
set wlan1 disable-csma=no enable-nstreme=no enable-polling=yes framer-limit=\
3200 framer-policy=none
/interface bridge port
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=none \
/ip
/ip hotspot profile
set default dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot \
http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap \
name=default rate-limit="" smtp-server=0.0.0.0 split-user-domain=no \
use-radius=no
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=\
1 status-autorefresh=1m transparent-proxy=no
/ip ipsec proposal
set default auth-algorithms=sha1 disabled=no enc-algorithms=3des lifetime=30m \
name=default pfs-group=modp1024
/ip pool
add name=dhcp_pool2 ranges=192.168.1.100-192.168.1.253
/ip dhcp-server
add address-pool=dhcp_pool2 authoritative=after-2sec-delay bootp-support=\
static disabled=no interface=bridge1 lease-time=1d name=dhcp1
/ip accounting
set account-local-traffic=no enabled=no threshold=256
/ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0
/ip address
add address=192.168.1.254/24 comment=\
"Ponte eth1 e vLan1 (somma delle due porte con stesso indirizzo)" \
disabled=no interface=bridge1 network=192.168.1.0
/ip dhcp-client
add default-route-distance=0 disabled=no interface=eth1-ADSL
/ip dhcp-server config
set store-leases-disk=5m
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.254
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB \
max-udp-packet-size=512 servers=212.216.112.112,212.216.172.62
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
tcp-close-wait-timeout=10s tcp-established-timeout=1d \
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s \
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no \
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=accept chain=forward comment="allow established connections" \
connection-state=established disabled=no
add action=accept chain=input connection-state=established disabled=no
add action=accept chain=forward comment="allow related connections" \
connection-state=related disabled=no
add action=accept chain=input connection-state=related disabled=no
add action=drop chain=forward comment="drop invalid connections" \
connection-state=invalid disabled=no
add action=accept chain=forward comment="Permette HTTP" disabled=no dst-port=\
80 protocol=tcp
add action=accept chain=input disabled=no dst-port=8080 protocol=tcp
add action=accept chain=input comment="per far accedere WebFig su porta 801" \
disabled=no dst-port=801 protocol=tcp
add action=accept chain=forward comment="Permette SMTP" disabled=no dst-port=\
25 protocol=tcp
add action=accept chain=forward comment="Permette POP3" disabled=no dst-port=\
110 protocol=tcp
add action=accept chain=input comment="Accetta accesso x WINBOX" disabled=no \
dst-port=8291 protocol=tcp
add action=accept chain=input comment=\
"Accetta richieste dai PC della rete al Server DNS" disabled=no \
dst-port=53 protocol=udp
add action=accept chain=input disabled=no dst-port=53 protocol=tcp
add action=drop chain=input comment=\
"------------------ B L O C C A T U T T O ---------------" disabled=\
no
/ip firewall nat
add action=masquerade chain=srcnat comment="Lan eth2 - Produzione" disabled=\
no src-address=192.168.1.0/24
add action=redirect chain=dstnat comment=\
"Webproxy - redirect porta 80 a 8080" disabled=no dst-port=80 protocol=\
tcp to-ports=8080
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061 sip-direct-media=yes
set pptp disabled=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip neighbor discovery
set wlan1 disabled=yes
set eth1-ADSL disabled=no
set eth2-Lan disabled=no
set ether3 disabled=no
set bridge1 disabled=no
/ip proxy
set always-from-cache=yes cache-administrator=webmaster cache-hit-dscp=4 \
cache-on-disk=yes enabled=yes max-cache-size=unlimited \
max-client-connections=600 max-fresh-time=1d max-server-connections=600 \
parent-proxy=0.0.0.0 parent-proxy-port=0 port=8080 serialize-connections=\
no src-address=0.0.0.0
/ip proxy access
add action=allow disabled=no dst-host=pagamenti.unicredito.it
add action=deny disabled=no dst-host=*porn*
add action=deny disabled=no dst-host=*game*
add action=deny disabled=no dst-host=*playboy*
add action=deny disabled=no dst-host=*friendster*
add action=deny disabled=no dst-host=*youporn*
add action=deny disabled=no dst-host=*twistys*
add action=deny disabled=no dst-host=www.youporn.com
add action=deny disabled=no dst-host=*pornhub*
add action=deny disabled=no dst-host=*spankwire*
add action=deny disabled=no dst-host=*pornotube*
add action=deny disabled=no dst-host=*redtube*
add action=deny disabled=no dst-host=*xtube*
add action=deny disabled=no dst-host=*megarotic*
add action=deny disabled=no dst-host=*shufuni*
add action=deny disabled=no dst-host=*maxporn*
add action=deny disabled=no dst-host=*badjoio*
add action=deny disabled=no dst-host=*xhamster*
add action=deny disabled=no dst-host=*yuvutu*
add action=deny disabled=no dst-host=*smanettoni*
add action=deny disabled=no dst-host=*spyhouse*
add action=deny disabled=no dst-host=*pornshop*
add action=deny disabled=no dst-host=*sex*
add action=deny disabled=no dst-host=*slut*
add action=deny disabled=no dst-host=www.libero.it
add action=deny disabled=no dst-host=*emule*
add action=deny disabled=no dst-host=*erot*
add action=deny disabled=no dst-host=*sesso*
add action=deny disabled=no dst-host=*eroshare*
add action=deny disabled=no dst-host=*tnaflix*
add action=deny disabled=no dst-host=*adult*
add action=deny disabled=no dst-host=*eros*
add action=deny disabled=no dst-host=www.userbinaries.com
add action=deny disabled=no dst-host=*gogousenet*
add action=deny disabled=no dst-host=www.usenetlive.com
add action=deny disabled=no dst-host=www.binsearch.info
add action=deny disabled=no dst-host=*da-te*
add action=deny disabled=no dst-host=*incontri*
add action=deny disabled=no dst-host=*alt.com*
add action=allow disabled=no dst-host=*facebook*
add action=deny disabled=no dst-host=*badoo*
add action=deny disabled=no dst-host=*messenger*
add action=deny disabled=no dst-host=*hotmail*
add action=deny disabled=no dst-host=*sms*
add action=deny disabled=no dst-host=*live*
add action=deny disabled=no dst-host=*blog*
add action=deny disabled=no dst-host=*giochi*
add action=deny disabled=no dst-host=*supermario*
add action=deny disabled=no dst-host=*mochibot*
add action=deny disabled=no dst-host=*feedj*
add action=deny disabled=no dst-host=*counter*
add action=deny disabled=no dst-host=*.tv
add action=deny disabled=no dst-host=*zozzerie*
add action=deny disabled=no dst-host=*youjizz*
add action=deny disabled=no dst-host=*twitter*
add action=deny disabled=no dst-host=*sologossip*
add action=deny disabled=no dst-host=*ovo*
add action=deny disabled=no dst-host=*splider*
add action=deny disabled=no dst-host=*viziosi*
add action=deny disabled=no dst-host=*miaexmoglie*
add action=deny disabled=no dst-host=*xmovies*
add action=deny disabled=no dst-host=*wind.it*
add action=deny disabled=no dst-host=*pokercasino*
add action=deny disabled=no dst-host=*cruciverba*
add action=deny disabled=no dst-host=*superelisa*
add action=deny disabled=no dst-host=*trasgredendo*
add action=deny disabled=no dst-host=*seducente*
add action=deny disabled=no dst-host=www.sky.it
add action=deny disabled=no dst-host=*iperclub*
add action=deny disabled=no dst-host=*vodafone*
add action=deny disabled=no dst-host=*tim.it
add action=deny disabled=no dst-host=176.31.226.210
add action=deny disabled=no dst-host=78.140.144.8
add action=deny disabled=no dst-host=*video.mediaset.it
/ip service
set telnet disabled=no port=23
set ftp disabled=no port=21
set www disabled=no port=801
set ssh disabled=no port=22
set www-ssl certificate=none disabled=yes port=443
set api disabled=yes port=8728
set winbox disabled=no port=8291
/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080
/ip ssh
set forwarding-enabled=no
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no \
inactive-flow-timeout=15s interfaces=all
/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes