PCQ, Transparent Bridge, Connection Limits

I have a bridge from a hotspot location where the customers are downloading like crazy and causing trouble. I don’t have a mikrotik router on site it is a different brand wireless. But the bridge back is mikrotik so I use the firewall rules on the bridge. I want to use PCQ so that every hotspot user is limited to a speed. We had a customer at full speed all weekend and it really affected other customers.

So my question is this. I mangle all traffic. Then I apply that mangle rule to a queue tree for upload and download using PCQ.

I also want to drop ALL P2P. But I also want to limit each connection to 50 connections.

chain=forward action=drop p2p=all-p2p
chain=prerouting action=mark-packet new-packet-mark=ALL_traffic passthrough=no
chain=prerouting action=accept protocol=tcp src-address=192.168.0.0/24 connection-limit=50,32

name=“pcq_upload” parent=ether1 packet-mark=ALL_traffic limit-at=0 queue=PCQ_UPLOAD priority=1
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

name=“pcq_download” parent=wlan1 packet-mark=ALL_traffic limit-at=0 queue=PCQ_DOWNLOAD priority=1
max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

Each queue type has a set speed so … should this work? I know it matches the first firewall rule but will this limit the connections to 50 each and drop p2p and mark the connection?

Anyone see a problem with this simple setup? I can’t go onsite to test it out unfortunately any time soon. But I need to get these guys under control..

To capture traffic that going trough the bridge you need to enable “/interface bridge set use-ip-firewall=yes”