How to close access to the Internet but at the same time leave TeamViewer working for one computer through Mikrotik?

Question

System administration

Good day.
A Mikrotik router is installed at the factory, you need to close Internet access for one computer but leave the working TeamViewer on the same computer. Please advise how to implement this.

Answer 1

Find out what ports teamview needs to work and make two rules. The first - allows the necessary ports, the second - drop for everything else.

Answer 2

Register in the list "teamviewer.com" in Firewall / Layer7 Protocols
Add two rules to the firewall. In the first one, you write a specific address that is allowed access through the Layer7 filter.
In the second rule, drop everyone using the Layer7 filter.
TeamViewer cannot log in, and as a result does not work.

Answer 3

The solution was to close ports from 1 to 65535 for a certain ip via tcp, udp, and leave port 5938 open, which is used by TeamViewer.