If I set my local proxy server on mobile devices wi-fi settings all traffic goes through that proxy, even from apps and https.
Can I do the same with mikrotik?
I know about transparent proxy and can redirect port 80, but what about all traffic, like in system settings?

there's always action=redirect in Mikrotik firewall

there's always action=redirect in Mikrotik firewall

Just redirect all incoming traffic from all ports on WAN to squid ip and port?
Ok, I'll try it.

there's always action=redirect in Mikrotik firewall

Beware that the redirect action is meant for redirecting traffic to a local port on the router itself.
The appropriate action for this scenario would be dst-nat.
And I frankly don't get the point what this should be useful for.
-Chris

And I frankly don't get the point what this should be useful for.
-Chris

To block ads and redirect few useful domains, blocked by ISP, to TOR. And without additional settings for my guests, of course.

To block ads and redirect few useful domains, blocked by ISP, to TOR. And without additional settings for my guests, of course.

Makes sense...
The statement "all ports on WAN" made me conclude that you wanted to forward all inbound traffic to oyur squid.
-Chris

hello
you should add rule in firewall-nat with chain dst-nat and set protocol tcp and dst-port your port then action set with dst-nat and to-address squid server

My dstnat rule not working. There are matching packets in winbox, but I can't see Squid rules working. And disabling masquerade disables internet.
Chain: dstnat, Protocol: tcp, In interface: pppoe-out1(from my ISP), Action: dstnat, To Addresses: 192.168.88.2, To Ports: 3128.

I'm trying now to dstnat at least port 80, it doesn't work either.