Redirecionamento sem controle de banda (squid).

[thefox]

Olá pessoal bom dia a todos.

tenho mikrotik junto com brazilfw trabalho com hotspot.

ate então estou usando a regra, ate então quando adiciono as regras o mikrotik fica sem controle de banda, os clientes consome todo o link. Espero a ajuda de todos.
Muito obrigado.

/ip firewall nat add chain=dstnat src-address=10.111.1.2 dst-address=10.111.1.2 protocol=tcp dst-port=80 action=accept 

/ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=dst-nat to-address=10.111.1.2 to-ports=3128 

 Configuração de firewall mangle: 

/ip firewall mangle chain=forward action=mark-connection new-connection-mark=forward-hits passthrough=yes content=X-Cache: HIT 

/ip firewall mangle chain=forward action=mark-packet new-packet-mark=cache-hits passthrough=no connection-mark=forward-hits 

/ip firewall mangle chain=postrouting action=mark-connection new-connection-mark=proxy-hits passthrough=yes tos=48  

/ip firewall mangle chain=postrouting action=mark-packet new-packet-mark=proxy-squid passthrough=no connection-mark=proxy-hits 

 Queue tree: 

/queue tree add name="cache_hits" parent=global-out   packet-mark=proxy-squid limit-at=0 queue=default priority=8   max-limit=8000000 burst-limit=0 burst-threshold=0 burst-time=0s 

/queue tree add 27   name="cache" parent=global-out   packet-mark=cache-hits limit-at=0 queue=default priority=8   max-limit=4000000 burst-limit=0 burst-threshold=0 burst-time=0s  

[thefox]

alguem pode ajudar?