на данный момент 
надо 
что то не получается
[#@MikroTik] > ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=prerouting action=mark-connection new-connection-mark=ISP1_in
passthrough=no dst-address=1.1.1.2 in-interface=ether8 log=no
log-prefix=""
1 chain=output action=mark-routing new-routing-mark=ISP1 passthrough=no
connection-mark=ISP1_in log=no log-prefix=""
2 chain=prerouting action=mark-connection new-connection-mark=ISP2_in
passthrough=no dst-address=2.2.2.2 in-interface=ether7 log=no
log-prefix=""
3 chain=output action=mark-routing new-routing-mark=ISP2 passthrough=no
connection-mark=ISP2_in log=no log-prefix=""
4 chain=prerouting action=mark-routing new-routing-mark=List_liner
passthrough=no src-address-list=List_liner log=no log-prefix=""
5 chain=prerouting action=mark-routing new-routing-mark=TEL passthrough=no
src-address=192.168.100.4 log=no log-prefix=""
6 chain=prerouting action=mark-routing new-routing-mark=LAN passthrough=no
src-address=192.168.96.0/21 log=no log-prefix=""
[#@MikroTik] > ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=ether8 log=no log-prefix=""
1 chain=srcnat action=masquerade out-interface=ether7 log=no log-prefix=""
[#@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 1.1.1.1 1
1 S 0.0.0.0/0 2.2.2.1 1
2 S 0.0.0.0/0 2.2.2.1 9
3 A S 0.0.0.0/0 1.1.1.1 10
4 S 0.0.0.0/0 2.2.2.1 10
5 S 0.0.0.0/0 2.2.2.1 11
6 A S 0.0.0.0/0 1.1.1.1 11
7 ADC 1.1.1.0/30 1.1.1.2 ether8 0
8 DC 2.2.2.0/30 2.2.2.2 ether7 255
9 ADC 192.168.96.0/21 192.168.100.60 ether1 0