Trouble with Simple Queue in ROS 6.7

RouterOS General
1

Hi.
I have rb750 with ROS 6.7 There are two ip clasess - one is private (behind nat) and second is public.
I need to limit private class per ip to 5/2, public has to be without limit.
I did setup according to wiki but its not working.
Mangle:

 0   ;;; kl_upload
     chain=prerouting action=mark-packet new-packet-mark=kl_upload 
     passthrough=yes src-address-list=NAT in-interface=bridge1 

 1   ;;; kl_download
     chain=prerouting action=mark-packet new-packet-mark=kl_download 
     passthrough=yes in-interface=ether1-WAN

Simple queue:

0 X  name="queue1" target=172.20.0.0/16 parent=none 
      packet-marks=kl_upload,kl_download priority=8/8 
      queue=pcq-upload-default/pcq-upload-default limit-at=2M/5M 
      max-limit=40M/40M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s 
      total-queue=default

Additional problem is with marking prerouting in WAN because i dont know how to mark incoming packet to private ip without public ips.

Doesnt matter how i set queue type, result is always that same (global limit on interface):

 5 * name="pcq-upload-default" kind=pcq pcq-rate=2M pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000 pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s 
     pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128 pcq-dst-address6-mask=128 

 6 * name="pcq-download-default" kind=pcq pcq-rate=2M pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000 pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s 
     pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128 pcq-dst-address6-mask=128
2

Try not to use connection mark. Leave that as blank.
First setup your queue types.
you will need two configure. one with a limit of 0 which means it splits the connection between the computers browsing equally this will be used for the LAN. Then second batch of queues is where your limits will be applied.

7 name=“PCQ-UPLOAD-0” kind=pcq pcq-rate=0 pcq-limit=50
pcq-classifier=src-address pcq-total-limit=4000 pcq-burst-rate=0
pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32
pcq-dst-address-mask=32 pcq-src-address6-mask=64
pcq-dst-address6-mask=64

8 name=“PCQ-DOWN-0” kind=pcq pcq-rate=0 pcq-limit=50
pcq-classifier=dst-address pcq-total-limit=4000 pcq-burst-rate=0
pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32
pcq-dst-address-mask=32 pcq-src-address6-mask=64
pcq-dst-address6-mask=64

5 name=“PCQ-UPLOAD-80” kind=pcq pcq-rate=80k pcq-limit=50
pcq-classifier=src-address pcq-total-limit=4000 pcq-burst-rate=0
pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32
pcq-dst-address-mask=32 pcq-src-address6-mask=64
pcq-dst-address6-mask=64

6 name=“PCQ-DOWN-512” kind=pcq pcq-rate=512k pcq-limit=50
pcq-classifier=dst-address pcq-total-limit=4000 pcq-burst-rate=0
pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32
pcq-dst-address-mask=32 pcq-src-address6-mask=64
pcq-dst-address6-mask=64

(queue 0 is for LAN to LAN traffic so that any limitations you put on for the internet will no affect someone communicating to another person on the LAN)
0 name=“LAN Traffic” target=172.17.0.0/16 dst=172.17.0.0/16 parent=none
packet-marks=“” priority=8/8 queue=PCQ-UPLOAD-0/PCQ-DOWN-0 limit-at=0/0
max-limit=100M/100M burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s

(queue 2 is the WAN limit. Change your max-limit to what ever your connection is select the PCQ-UPLOAD and DOWN you have configured.)
2 name=“WAN Limt” target=172.17.0.0/16 parent=none packet-marks=“”
priority=8/8 queue=PCQ-UPLOAD-80/PCQ-DOWN-512 limit-at=0/0
max-limit=2664k/5348k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s