Qual pode ser o erro?

Pessoal uso as seguinte regra no meu MK, Web-Proxy + Hotspot, para q possa funcionar a Radio UOL, Conectiva Social, etc, so que essa regra não bloqueia os sites q coloco na aba Access em Web-Proxy, oq pode estar errado nela, ou tem outra forma de fazer funcionar?
Dêem mais uma força ai pessoal!

Minhas regras atuais:

/ ip firewall nat
add chain=srcnat out-interface=LINK action=masquerade comment="NAT" \
disabled=no
add chain=srcnat src-address=192.168.2.0/25 action=masquerade \
comment="masquerade hotspot network" disabled=no
add chain=srcnat src-address=192.168.4.0/25 action=masquerade \
comment="masquerade hotspot network" disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless \
dst-address=200.201.160.0/25 protocol=tcp dst-port=80 hotspot=auth \
action=accept comment="Conectividade Social" disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless \
dst-address=200.201.166.0/25 protocol=tcp dst-port=80 hotspot=auth \
action=accept comment="" disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless \
dst-address=200.201.173.0/25 protocol=tcp dst-port=80 hotspot=auth \
action=accept comment="" disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless \
dst-address=200.201.174.0/25 protocol=tcp dst-port=80 hotspot=auth \
action=accept comment="" disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless dst-address=200.221.0.0/16 \
protocol=tcp dst-port=80 hotspot=auth action=accept comment="Radio UOL" \
disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless \
dst-address=200.234.199.0/24 protocol=tcp dst-port=80 hotspot=auth \
action=accept comment="Radio Interativa" disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless dst-address=209.85.106.0/24 \
protocol=tcp dst-port=80 hotspot=auth action=accept comment="Radio \
Sucesso" disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless dst-address=200.154.0.0/16 \
protocol=tcp dst-port=80 hotspot=auth action=accept comment="Radio TERRA" \
disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless dst-address=72.36.130.0/24 \
protocol=tcp dst-port=80 hotspot=auth action=accept comment="" disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless dst-address=66.135.32.0/24 \
protocol=tcp dst-port=80 hotspot=auth action=accept comment="" disabled=no
add chain=pre-hotspot dst-address=192.168.2.100 protocol=tcp dst-port=80 \
hotspot=auth action=redirect to-ports=64873 comment="Paginas de status do \
hotspot" disabled=no
add chain=pre-hotspot in-interface=Bridge-Wireless protocol=tcp dst-port=80 \
hotspot=auth action=redirect to-ports=8080 comment="Redirecionamento \
Proxy" disabled=no
add chain=dstnat in-interface=LOCAL protocol=tcp dst-port=80 action=redirect \
to-ports=8080 comment="Web-Proxy Local" disabled=no
add chain=dstnat protocol=tcp dst-port=5901 action=dst-nat \
to-addresses=10.1.5.3 to-ports=5901 comment="REDIRECIONAMENTO VNC ADM" \
disabled=no
add chain=dstnat protocol=tcp dst-port=4899 action=dst-nat \
to-addresses=10.1.5.4 to-ports=4899 comment="" disabled=no
add chain=dstnat protocol=tcp dst-port=5900 action=dst-nat \
to-addresses=192.168.2.6 to-ports=5900 comment="REDIRECIONAMENTO VNC AR" \
disabled=no
add chain=dstnat protocol=tcp dst-port=4662 action=dst-nat \
to-addresses=192.168.4.42 to-ports=4662 comment="Redirecionamento Emule \
TCP" disabled=no
add chain=dstnat protocol=udp dst-port=4672 action=dst-nat \
to-addresses=192.168.4.42 to-ports=4672 comment="Redirecionamento Emule \
UPD" disabled=no


ip web-proxy> pr
enabled: yes
src-address: 0.0.0.0
port: 8080
hostname: "proxy"
transparent-proxy: yes
parent-proxy: 0.0.0.0:0
cache-administrator: "webmaster"
max-object-size: 10240KiB
cache-drive: system
max-cache-size: 35156250KiB
max-ram-cache-size: unlimited
status: running
reserved-for-cache: 22160384KiB
reserved-for-ram-cache: 2048KiB

Tenho centenas de paginas cadastradas no bloqueio so q não bloqueia nenuma com essas regra q estou usando!