Blocking social networks mikrotik?

Question

Computer networks

Hello. I block social networks on mikrotike.
The essence of the question is how to block social sites on the network, except for certain ip addresses.
For example, I block the network 10.34.11.0/24 with the rule
/ip firewall filter add chain=forward protocol=tcp src-address=10.34.11.0/24 content="vk.com" action=reject reject-with=tcp-reset
and 10.34. 11.30 and 10.34.11.35 it is necessary that social networks are not blocked, how to implement this.

Answer 1

Place an allow rule before the deny rule.
/ip firewall filter add chain=forward protocol=tcp src-address=10.34.11.30 content="vk.com" action=accept
/ip firewall filter add chain=forward protocol=tcp src-address=10.34.11.35 content="vk .com" action=accept
/ip firewall filter add chain=forward protocol=tcp src-address=10.34.11.0/24 content="vk.com" action=reject reject-with=tcp-reset
should be like this as a result