but it not working, any packets hitting this rule.
So my question is: for packets originated from router itself, NAT table (especially dstnat chain) is not processed?
Thanks for explanation, looks like Mikrotik firewall is quiet different than Linux iptables where OUTPUT traffic passing through NAT table and changing dst ip address in packets generated on localhost is easy (ex. when ping 1.1.1.1 packets goes to 2.2.2.2). Another example, how force local traffic to pass through web proxy, in Mikrotik is not possible?