What is the best way to turn traffic?

Question

linux

Good day everyone.
I have a mikrotik hAP ac lite which isp (provider) comes to, then I have a mikrotik connected to l2tp / ipsec to a server that is located abroad, all http traffic goes through l2tp / ipsec (80,443), here's my question in than, everything seems to be fine, but I would like such resources as youtube, vk, fb, etc. or let internal ip not through l2tp / ipsec client, but through our home provider, please help to implement. Thank you very much.
add action=mark-routing chain=prerouting comment="To ISP HTTP udp" dst-address-list=to_isp in-interface=LAN-WIFI new-routing-mark=to_isp \
passthrough=no port=80,81 protocol=udp src address=10.20.11.26
add action=mark-routing chain=prerouting comment="To ISP HTTP udp" dst-address-list=to_isp in-interface=LAN-WIFI new-routing-mark=to_isp \
passthrough=no port=80,81 protocol=tcp src-address=10.20.11.26
add action=mark-routing chain=prerouting comment="To ISP HTTP tcp" dst-address-list=to_isp in-interface=LAN-WIFI log=yes \
new-routing-mark=to_isp passthrough =no port=443 protocol=tcp src-address=10.20.11.26
add action=mark-routing chain=prerouting comment="To ISP HTTP tcp" dst-address-list=to_isp in-interface=LAN-WIFI new-routing- mark=to_isp \
passthrough=no port=443 protocol=udp src-address=10.20.11.26
add action=mark-routing chain=prerouting comment="To GRE tunnell HTTP tcp"in-interface=LAN-WIFI new-routing-mark=to_gre passthrough=no \
port=80,81 protocol=tcp src-address=10.20.11.0/24
add action=mark-routing chain=prerouting comment="To GRE tunnell HTTP udp" in-interface=LAN-WIFI new-routing-mark=to_gre passthrough =no \
port=80,81 protocol=udp src-address=10.20.11.0/24
add action=mark-routing chain=prerouting comment="To GRE tunnell HTTPS tcp" in-interface=LAN-WIFI new-routing-mark =to_gre passthrough=no \
port=443 protocol=tcp src-address=10.20.11.0/24
add action=mark-routing chain=prerouting comment="To GRE tunnell HTTPS udp" in-interface=LAN-WIFI new-routing- mark=to_gre passthrough=no \
port=443 protocol=udp src-address=10.20.11.0/24
add action=mark-routing chain=prerouting comment="To GRE tunnell Proxy tcp" in-interface=LAN-WIFI new-routing-mark=to_gre passthrough=no \
port=8080,3128 protocol=tcp src-address=10.20. 11.0/24
add action=mark-routing chain=prerouting comment="To GRE tunnell Proxy udp" in-interface=LAN-WIFI new-routing-mark=to_gre passthrough=no \
port=8080,3128 protocol=udp src-address =10.20.11.0/24

The picture shows that I marked the first 4 rules that direct the internal IP to our local provider (but nothing works)), the next 6 rules redirect all traffic to l2tp/ipsec (everything works great here)

Answer 1

antifilter.download