/ip firewall nat

   ;;; Radio uol Hotspot
   chain=pre-hotspot dst-address=200.221.0.0/16 action=accept 

   ;;; masquerade hotspot network
   chain=srcnat src-address=10.1.1.0/24 action=masquerade 

   ;;; Conectividade Social
   chain=pre-hotspot in-interface=Local dst-address=200.201.160.0/24 protocol=tcp dst-port=80 hotspot=auth 
     action=accept 

   chain=pre-hotspot in-interface=Local dst-address=200.201.166.0/24 protocol=tcp dst-port=80 hotspot=auth action=accept 

   chain=pre-hotspot in-interface=Local dst-address=200.201.173.0/24 protocol=tcp dst-port=80 hotspot=auth action=accept 

   chain=pre-hotspot in-interface=Local dst-address=200.201.174.0/24 protocol=tcp dst-port=80 hotspot=auth action=accept 

   chain=pre-hotspot in-interface=Local dst-address=200.221.8.0/24 protocol=tcp dst-port=80 action=accept 

   ;;; Redirecionamento Proxy
   chain=pre-hotspot in-interface=Local protocol=tcp dst-port=80 hotspot=auth action=redirect to-ports=3128 

   ;;; Balanceamento de carga
   chain=srcnat connection-mark=odd action=src-nat to-addresses=192.168.15.199 to-ports=0-65535 

   chain=srcnat connection-mark=even action=src-nat to-addresses=192.168.241.73 to-ports=0-65535 
