^.+(.onion).*$
/ip firewall nat
add action=redirect chain=dstnat comment="TOR redir. DNS" disabled=no \
dst-port=53 layer7-protocol=Onion port=53 protocol=udp to-ports=5300
add action=redirect chain=dstnat comment="TOR Connections redir." disabled=no \
dst-address=10.0.0.0/8 protocol=tcp to-ports=9040
add action=masquerade chain=srcnat comment="Def. Masq" disabled=no \
out-interface=ether2-wan