Okay another attempt /queue simple add comment="guest to yb network is max" dst=10.0.0.0/8 name=guestYB target=10.172.202.0/24 add comment="YBGuest to internet" max-limit=10M/10M name=guestInternet target=10.172.202.0/24 no other rules, remove the mangle rules the bottom works, everything gets limited. The top one is meant to capture guest to internal ip addresses but it doesn't seem to work. A -----Original Message----- From: Alex Samad - Yieldbroker Sent: Tuesday, 17 May 2016 11:47 AM To: public@talk.mikrotik.com.au Subject: simple queue Hi Trying to limit up / down from 10.172.202.0/24 to the internet http://wiki.mikrotik.com/wiki/Manual:Queue#Queue_Types http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle /queue simple remove [ find where ! dynamic ] add comment="ratelimit for yboGuest network and only for marked packets" max-limit=10M/10M name=guestToInternet packet-marks=guestInternet target=10.172.202.0/24 /ip firewall mangle remove [ find where ! dynamic ] add action=mark-packet chain=forward new-packet-mark=guestInternet dst-address=10.172.202.0/24 src-address=!10.0.0.0 place-before=0 comment="Internet to guest" add action=mark-packet chain=forward dst-address=!10.0.0.0 src-address=10.172.202.0/24 new-packet-mark=guestInternet place-before=0 comment="Guest to internet" I can see packets matching the mangle rules but not in the queue. Also I am using fastconnect which is why I have the pattern matching mangle rules above the fastconnect rules ... if that matters ! Do I have to turn of fast connect or what am I doing wrong !!! A