/ip firewall filteradd action=drop chain=forward comment="Block Facebook HTTP" content=facebook disabled=yes dst-port=80 protocol=tcp src-address=192.168.1.0/24
add action=drop chain=forward comment="Block Facebook HTTPS" content=facebook disabled=yes dst-port=443 protocol=tcp src-address=192.168.1.0/24
add action=drop chain=forward comment="block facebook https" content=facebook disabled=no dst-port=443 protocol=tcp src-address=192.168.1.4-192.168.1.60
add action=drop chain=forward comment="block facebook" content=www.facebook.com disabled=no protocol=tcp src-address=192.168.1.4-192.168.1.60
add action=drop chain=forward comment="block youtube https" content=youtube disabled=no dst-port=443 protocol=tcp src-address=192.168.1.4-192.168.1.50
add action=drop chain=forward content=www.youtube.com disabled=no protocol=tcp src-address=192.168.1.4-192.168.1.50
add action=jump chain=forward disabled=yes jump-target=facebook src-address=192.168.1.50-192.168.1.60
add action=reject chain=facebook comment="deny Facebook" disabled=yes dst-address-list=Block-Facebook reject-with=icmp-network-unreachable