How to organize traffic redirection for a user with a specific MAC using the mikrotik firewall?

Question

network hardware

Firework!
Please let me know, as I've been scratching my head over this issue.
The essence of the problem: there is a Mikrotik routerBoard and an open network with Internet access, it is necessary to redirect all users, regardless of the address typed in the browser line, to a specific IP, and release users with a specific MAC to the Internet. A kind of captive portal.
I know how to do it with IPTABLES
($IPTABLES -t mangle -A internet -m mac --mac-source "cc:cc:cc:cc:cc" -j RETURN
$IPTABLES -t nat -A PREROUTING -m mark --mark 99 -p tcp --dport 80 -j DNAT --to-destination 10.10.0.1), but I don't want to install openwrt on the router.

Answer 1

and what prevents you from using FireWall in Mikrotik itself?