Sun Nov 20, 2011 9:45 pm
That's simply not supported. The only supported way to bypass clients by IP is the "/ip hotspot walled-garden ip" section, which automatically and dynamically creates entries in the hs-auth and hs-auth-to firewall filter chains. That section doesn't take address lists, so you can't use address lists. You could come up with some script that runs every minute and jockeys rules around to keer your customizations at the top, but that might break with future releases and would be relatively resource intensive.
Have you considered a different approach? Maybe use ranges instead of address lists?