Ip Firewall \ NAT
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
1 chain=srcnat action=masquerade out-interface=WAN1
2 chain=srcnat action=masquerade out-interface=WAN2
3 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=169.254.241.0/24
4 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=169.254.241.0/24
5 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=169.254.241.0/24
6 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=169.254.241.0/24
7 X ;;; Proxy
chain=dstnat action=dst-nat to-addresses=169.254.241.1 to-ports=8080
protocol=tcp dst-port=80
IP Firewall \ Mangle
0 chain=prerouting action=accept src-address-list=local-networks
dst-address-list=local-networks hotspot=auth
1 chain=input action=mark-connection new-connection-mark=WAN1_conn passthrough=yes
hotspot=auth in-interface=WAN1
2 chain=input action=mark-connection new-connection-mark=WAN2_conn passthrough=yes
hotspot=auth in-interface=WAN2
3 chain=output action=mark-routing new-routing-mark=to_WAN1 passthrough=yes hotspot=auth
connection-mark=WAN1_conn
4 chain=output action=mark-routing new-routing-mark=to_WAN2 passthrough=yes hotspot=auth
connection-mark=WAN2_conn
5 chain=prerouting action=accept dst-address=192.168.8.0/24 hotspot=auth
in-interface=Local
6 chain=prerouting action=accept dst-address=192.168.6.0/24 hotspot=auth
in-interface=Local
7 chain=prerouting action=mark-connection new-connection-mark=WAN1_conn passthrough=yes
dst-address-type=!local hotspot=auth in-interface=Local
per-connection-classifier=both-addresses-and-ports:2/0
8 chain=prerouting action=mark-connection new-connection-mark=WAN2_conn passthrough=yes
dst-address-type=!local hotspot=auth in-interface=Local
per-connection-classifier=both-addresses-and-ports:2/1
9 chain=prerouting action=mark-routing new-routing-mark=to_WAN1 passthrough=yes hotspot=auth
in-interface=Local connection-mark=WAN1_conn
10 chain=prerouting action=mark-routing new-routing-mark=to_WAN2 passthrough=yes hotspot=auth
in-interface=Local connection-mark=WAN2_conn
Interface list
/interface> print
Flags: D - dynamic, X - disabled, R - running, S - slave
NAME TYPE MTU L2MTU
0 R WAN2 ether 1500
1 R WAN1 ether 1500 1600
2 R Local ether 1500