/ip firewall mangle
add chain=output protocol=tcp src-port=3128 content="X-Cache: HIT" action=mark-connection new-connection-mark=squid-connection-HIT passthrough=yes \
comment="Cache-squid" disabled=no
add chain=output connection-mark=squid-connection-HIT action=mark-packet new-packet-mark=squid-packet-HIT passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=Cliente action=mark-packet new-packet-mark=test-up passthrough=no comment="UP TRAFFIC" disabled=no -time=0s disabled=no
/ queue tree
add name="Cache-full" parent=global-out packet-mark=squid-packet-HIT limit-at=1024000 queue=default priority=8 max-limit=1024000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name="upstream" parent=global-in packet-mark=test-up limit-at=1024000 queue=default priority=8 max-limit=1024000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
/ ip firewall nat
add chain=dstnat src-address=1.1.1.0/24 protocol=tcp dst-port=80 \
action=redirect to-ports=3128 comment="" disabled=no
* trocar ip em negrito pela sua faixa!
