Hotspot DNS redirect (and some various questions)

Hello,

I’ve bought a RB951 for setting up a hotspot.
In the past I used OpenDNS with content filtering based on the DNS requests.
In fact I must force all DNS requests passed the RB so no alternative DNS is possible.
I prefer without blocking in the firewall so people can use the internet without changing their personal DNS settings.

I found this in the wiki:
http://wiki.mikrotik.com/wiki/Force_users_to_use_specified_DNS_server

But this is not possibe to set this only on the hotspot, when I change the In. Interface to my hotspot I get a fault:
in/out interface matcher not possible when interface (Hotspot) is slave - use master instead (bridge-local).

I think I need to create a second bridge but how / is there a better solution?


Some other things I try to do:
Log the visited websites (= DNS query) to have a kind of tracking in case of illegal downloads that can be traced back to the hotspot user.
Block P2P as much as possible.
Allow streaming but with low priority.


Thanks