routing problems

Hi,
I have 2 routers cisco as gateways.One of them is with bgp and this router anounce in internet my classes and other cisco router is a gateway with one IP and NAT config.
Behind this routers are a mikrotik v3 router who manage all trafic in my network.I wanna config this router mikrotik to send all p2p traffic to my cisco router with nat and in this way to save more trafic on router cisco with bgp.
I config mikrotik with this config:
/ip route
add gateway=10.10.11.1 routing-mark=CISCO-BGP
add gateway=10.10.9.1 routing-mark=CISCO-NAT
add gateway 10.10.11.1
/ip route rule
add dst-address=11.22.33.0/24 action=lookup table=main
add dst-address=11.22.44.0/24 action=lookup table=main
add dst-address=11.22.55.0/23 action=lookup table=main
Note:11.22.33.0/24 11.22.44.0/24 and 11.22.55/23 are routable classes PA-assigned
add src-address=10.10.11.0/24 action=lookup table=CISCO-BGP
add src-address=10.10.9.0/24 action=lookup table=CISCO-NAT
add routing-mark=CISCO-BGP action=lookup table=CISCO-BGP
add routing-mark=CISCO-NAT action=lookup table=CISCO-NAT
/ip firewall mangle
add chain=prerouting action=mark-routing new-routing-mark=CISCO-NAT passthrough=no p2p=all-p2p protocol=tcp
add chain=prerouting action=mark-routing new-routing-mark=CISCO-NAT passthrough=no p2p=all-p2p protocol=udp
add chain=prerouting action=mark-routing new-routing-mark=CISCO-BGP

After this config of mikrotik, trafic p2p goes to CISCO-NAT and other trafic like http,pop3 or smtp goes to CISCO-BGP.
When I try to access my network behind of mikrotik from INTERNET…surprise… ping and icmp goes to any routers behind mikrotik but any connection like telnet,web or winbox doesn`t work.

How to solve this problem?

Thank`s in advance for any ideea.

in short words the problem is encrypted p2p - you cannot reliably detect from encrypted traffic what is and what is not p2p. Usual way is to set all traffic through p2p link and then mark and forward know traffic other direction.