/ip firewall mangle 
add action=jump chain=prerouting comment="" connection-state=new disabled=no jump-target=tcp-services protocol=tcp 
add action=jump chain=prerouting comment="" connection-state=new disabled=no jump-target=udp-services protocol=udp 
add action=jump chain=prerouting comment="" connection-state=new disabled=no jump-target=other-services 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=20-21 new-connection-mark=ftp passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=22 new-connection-mark=ssh passthrough=yes protocol=tcp src-port=513-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=23 new-connection-mark=telnet passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=25 new-connection-mark=smtp passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=53 new-connection-mark=dns passthrough=yes protocol=tcp src-port=53 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=53 new-connection-mark=dns passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=80 new-connection-mark=http passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=110 new-connection-mark=pop3 passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=113 new-connection-mark=auth passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=119 new-connection-mark=nntp passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=143 new-connection-mark=imap passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=161-162 new-connection-mark=snmp passthrough=yes protocol=tcp \
src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=443 new-connection-mark=https passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=465 new-connection-mark=smtps passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=993 new-connection-mark=imaps passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=995 new-connection-mark=pop3s passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=1723 new-connection-mark=pptp passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=2379 new-connection-mark=kgs passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=3128 new-connection-mark=proxy passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=3987 new-connection-mark=win-ts passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=4242-4243 new-connection-mark=emule passthrough=yes protocol=tcp \
src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=1024-65535 new-connection-mark=overnet passthrough=yes protocol=tcp \
src-port=4661-4662 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=1024-65535 new-connection-mark=emule passthrough=yes protocol=tcp src-port=4711 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=5900-5901 new-connection-mark=vnc passthrough=yes protocol=tcp \
src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=6667-6669 new-connection-mark=irc passthrough=yes protocol=tcp \
src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=6881-6889 new-connection-mark=bittorrent passthrough=yes protocol=tcp \
src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=8080 new-connection-mark=http passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no dst-port=8291 new-connection-mark=winbox passthrough=yes protocol=tcp src-port=1024-65535 
add action=mark-connection chain=tcp-services comment="" disabled=no new-connection-mark=other-tcp passthrough=yes protocol=tcp 
add action=mark-connection chain=udp-services comment="" disabled=no dst-port=53 new-connection-mark=dns passthrough=yes protocol=udp src-port=1024-65535 
add action=mark-connection chain=udp-services comment="" disabled=no dst-port=123 new-connection-mark=ntp passthrough=yes protocol=udp src-port=1024-65535 
add action=mark-connection chain=udp-services comment="" disabled=no dst-port=1701 new-connection-mark=l2tp passthrough=yes protocol=udp src-port=1024-65535 
add action=mark-connection chain=udp-services comment="" disabled=no dst-port=4665 new-connection-mark=emule passthrough=yes protocol=udp src-port=1024-65535 
add action=mark-connection chain=udp-services comment="" disabled=no dst-port=4672 new-connection-mark=emule passthrough=yes protocol=udp src-port=1024-65535 
add action=mark-connection chain=udp-services comment="" disabled=no dst-port=1024-65535 new-connection-mark=emule passthrough=yes protocol=udp src-port=4672 
add action=mark-connection chain=udp-services comment="" disabled=no dst-port=12053 new-connection-mark=overnet passthrough=yes protocol=udp \
src-port=1024-6553
add action=mark-connection chain=udp-services comment="" disabled=no dst-port=1024-65535 new-connection-mark=overnet passthrough=yes protocol=udp \
src-port=12053 
add action=mark-connection chain=udp-services comment="" disabled=no dst-port=1024-65535 new-connection-mark=skype passthrough=yes protocol=udp src-port=36725 
add action=mark-connection chain=udp-services comment="" connection-state=new disabled=no new-connection-mark=other-udp passthrough=yes protocol=udp 
add action=mark-connection chain=other-services comment="" disabled=no icmp-options=8:0-255 new-connection-mark=ping passthrough=yes protocol=icmp 
add action=mark-connection chain=other-services comment="" disabled=no new-connection-mark=gre passthrough=yes protocol=gre 
add action=mark-connection chain=other-services comment="" disabled=no new-connection-mark=other passthrough=yes 
add action=change-mss chain=forward comment="" disabled=no new-mss=1448 protocol=tcp tcp-flags=syn