I want to give prioritizing on WAN port (Upload).
But no traffic on mangle.
Right now i dont use out-interface=WAN
what am i missing on network config?
/ip firewall mangle
add action=mark-packet chain=postrouting comment="winbox,ssh,etc" new-packet-mark=prior1 out-interface=WAN passthrough=no port=22,2200 protocol=tcp
add action=mark-packet chain=postrouting new-packet-mark=prio1 passthrough=no port=8291 protocol=tcp
my network setup
/interface ethernet
set [ find default-name=ether1 ] comment=Public name=WAN
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
/interface pppoe-client
add add-default-route=yes disabled=no interface=WAN name=pppoe-out1 password=xxxxx user=xxxxx
/interface vlan
add interface=ether5 name=guest-vlan vlan-id=10
add interface=ether5 name=local-vlan vlan-id=20
/ip address
add address=172.10.11.1/24 comment="Public Hostpot network" interface=guest-vlan network=172.10.11.0
add address=192.168.100.1/24 interface=WAN network=192.168.100.0
add address=192.168.3.1/24 comment="bypass network" interface=local-vlan network=192.168.3.0
add address=192.168.4.1/24 interface=ether2 network=192.168.4.0
/ip firewall filter
add action=drop chain=input comment="Drop all packets which does not have unicast source IP address" src-address-type=!unicast
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add chain=input comment="Accept established and related packets" connection-state=established,related
add chain=input comment="Accept all connections from local network" in-interface=ether2
add chain=input comment="Accept all connections from local network" in-interface=guest-vlan
add chain=input comment="Accept all connections from local network" in-interface=local-vlan
add action=drop chain=input comment="Drop invalid packets" connection-state=invalid
add action=drop chain=input comment="Drop all packets which are not destined to routes IP address" dst-address-type=!local
add action=drop chain=input comment="Drop all packets from public internet which should not exist in public network" in-interface=WAN src-address-list=NotPublic
add action=drop chain=forward comment="Block vlan-guest to access raspberry pi, vice versa" dst-address=192.168.4.0/24 src-address=172.10.11.0/24
add action=drop chain=forward dst-address=172.10.11.0/24 log=yes src-address=192.168.4.0/24
add action=drop chain=forward comment="Block vlan-guest to access vlan-local" dst-address=192.168.3.0/24 src-address=172.10.11.0/24
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="Masquerade PPPoE-out1" out-interface=pppoe-out1
add action=masquerade chain=srcnat comment="Masquerade hotspot network" src-address=172.10.11.0/24
add action=masquerade chain=srcnat comment="masquerade hotspot network" disabled=yes src-address=10.0.10.0/24
add action=masquerade chain=srcnat comment="masquerade wifi network" src-address=192.168.3.0/24
add action=masquerade chain=srcnat comment="masquerade raspberry pi network" src-address=192.168.4.0/24
add action=masquerade chain=srcnat comment="masquerade adsl modem network" src-address=192.168.100.0/24
Diagram1.jpeg