just to be sure.. i don't see this in your screens..
To enable Per-Host Isolation Add the following to the “Advanced option strings” (in the Interfaces → SQM-QoS page; Queue Discipline tab, look for the Dangerous Configuration options):
For queueing disciplines handling incoming packets from the internet (internet-ingress):
nat dual-dsthost ingressFor queueing disciplines handling outgoing packets to the internet (internet-egress):
nat dual-srchost
please mark as solved if you are satisfied with the results