How to deny access to all sites except one on Mikrotik?

Question

network hardware

Good afternoon, there is a mikrotik rb951G - 2HnD router, the task is to prohibit certain machines from accessing the Internet, leaving only access to one page.
It turns out to completely deny access, but how to add access to only one domain (onedrive.live.com)?
Thanks for the help.

Answer 1

Upgrade to 6.36 or higher, add the desired onedrive.live.com domain to the address-list. Let's call it onedrive
Add the addresses of the machines you want to restrict to another address-list, let's call it restrict
Next, write the rule in the firewall:

/ip firewall filter
add chain=forward src-address-list=restrict dst-address-list=!onedrive action=drop

Everything )

Answer 2

Create an address list, with the IP to this site, and add an allow rule above the deny rule.
If all IPs are not known, then add a couple of static entries to the DNS.