I have potential clients that want to self filter themsleves though an upstream proxy service. The proxy settings are set on their individual machines on their lan. It is important to these potential clients that the proxy cannot be bypassed.

Our CPE's are routerOS in wireless station mode, routed w/nat. I need to be pointed in the right direction to set routeros firewall to block access to any machine without proxy settings. Any suggestions?

Anybody? Surely this must me possible.

I have a working understanding of routeros firewalling, just need a little advise. I've tried blocking all but proxy and dns address, but that doesn't work.

Never mind. Got it.