You can play with the option hotspot, it is available in
ip firewall filter add hotspot=
ip firewall mangle add hotspot=
auth - true, if a packet comes from an authenticted HotSpotclient
from-client - true, if a packet comes from any HotSpot client
http - true, if a HotSpot client sends a packet to the address and port previously detected as his proxy server (Universal Proxy technique) or if the destination port is 80 and transparent proxying is enabled for that particular client
local-dst - true, if a packet has local destination IP address
to-client - true, if a packet is sent to a client
All values can be in opposite state, like !auth=“no authorized”