How to allow certain sites through Mikrotik?

Question

Computer networks

Greetings!
There must be certain laptops through which you can only go to mail (gmail.com drive)
Certain sites are quietly blocked through the Layer7 protocol, but I need a reverse policy:
prohibit everything except.
This wording actually blocks everything that is in the list:

ip firewall filter add chain=forward src-mac-address= mac_note layer7-protocol=google action=drop

If you use: !=google
then everything is blocked, in fact.
What is the correct way to do this?

Answer 1

nothing helped, given that there are not very many laptops, I picked up squid on each and turned traffic through localhost.