How to prevent everyone from climbing a computer through Mikrotik?

Question

Mikrotik

Hello.
There is a network with ip-addresses 192.168.1.0. Mikrotik is used as a router.
I need to hide 1 computer from everyone except a couple of people.
To do this, I connected it not to the switch, like all other PCs, but directly to Mikrotik itself. I figured that the PC connected to the Mikrotik switch would not be able to "protect", and if the packets run directly through the Mikrotik itself, then it may well block access to this PC.
To begin with, I decided to try to just close it from everyone.
I add a rule in the MT firewall:
Chain: forward
Dst. Address: 192.168.1.22
Action: drop.
And nothing happens. All as had access to it, and have.
Tried instead of Dst. Address to configure directly the interface to which it is connected, but it still did not give any results.
Please tell me how to set it up correctly.

Answer 1

Give another subnet and I think this will be enough within a small organization. Well, either use vlan.

Answer 2

See filters in breeches.

Answer 3

there is no vlan in Mikrotik? allocate a separate subnet for yourself, configure nat into it from the Internet and sit in your sandbox

Answer 4

Of course, nothing is happening and will not happen. Go read the documentation until you are fully enlightened, specifically about use-ip-firewall