Pessoal !! Eu ñ consigo mais fazer o meu web-proxy funcionar, ja refiz várias vezes, será que estou esquecendo algo ???????

MEU NAT
0 ;;; masquerade hotspot network
chain=srcnat src-address=192.168.254.0/24 action=masquerade
1 chain=dstnat in-interface=bridge1 src-address=192.168.254.0/24 protocol=tcp
dst-port=80 action=redirect to-ports=3128
MEU MANGLE
0 ;;; Cache-squid
chain=output protocol=tcp src-port=3128 content=X-Cache: HIT
action=mark-connection new-connection-mark=squid-connection-HIT
passthrough=yes
1 chain=output connection-mark=squid-connection-HIT action=mark-packet
new-packet-mark=squid-packet-HIT passthrough=no
2 ;;; UP TRAFFIC
chain=prerouting in-interface=bridge1 src-address=192.168.254.0/24
action=mark-packet new-packet-mark=test-up passthrough=no
3 ;;; Limite P2P
chain=prerouting p2p=all-p2p action=mark-connection
new-connection-mark=P2P_conn passthrough=yes
4 chain=prerouting connection-mark=P2P_conn action=mark-packet
new-packet-mark=p2p passthrough=yes
5 ;;; CONN-MARK
chain=forward src-address=192.168.254.0/24 action=mark-connection
new-connection-mark=teste-conn passthrough=yes
6 ;;; DOWN-DIRECT\CONNECTION
chain=forward in-interface=LINK connection-mark=teste-conn
action=mark-packet new-packet-mark=test-down passthrough=no
7 ;;; DOWN-VIA PROXY
chain=output out-interface=bridge1 dst-address=192.168.254.0/24
action=mark-packet new-packet-mark=test-down passthrough=no
MEU FILTER
0 ;;; Cache-squid
chain=output protocol=tcp src-port=3128 content=X-Cache: HIT action=mark-connection
new-connection-mark=squid-connection-HIT passthrough=yes
1 chain=output connection-mark=squid-connection-HIT action=mark-packet new-packet-mark=squid-packet-HIT passthrough=no
2 ;;; UP TRAFFIC
chain=prerouting in-interface=bridge1 src-address=192.168.254.0/24 action=mark-packet new-packet-mark=test-up
passthrough=no
3 ;;; Limite P2P
chain=prerouting p2p=all-p2p action=mark-connection new-connection-mark=P2P_conn passthrough=yes
4 chain=prerouting connection-mark=P2P_conn action=mark-packet new-packet-mark=p2p passthrough=yes
5 ;;; CONN-MARK
chain=forward src-address=192.168.254.0/24 action=mark-connection new-connection-mark=teste-conn passthrough=yes
6 ;;; DOWN-DIRECT\CONNECTION
chain=forward in-interface=LINK connection-mark=teste-conn action=mark-packet new-packet-mark=test-down
passthrough=no
7 ;;; DOWN-VIA PROXY
chain=output out-interface=bridge1 dst-address=192.168.254.0/24 action=mark-packet new-packet-mark=test-down
passthrough=no