Mikrotik router. How to disconnect a PC from the Internet, but not from the local network?

Question

Computer networks

Good afternoon.
Please advise how to implement the following. There is a small LAN where PCs connect to the Internet via PPPoE. Configured NAT, bridge and PPPoE client. IP addresses are given via DHCP. It is necessary that a single PC can be disconnected from the Internet, but not from the local network. I connect to the router through WinBox. I am not even interested in exact instructions, but simply in the direction where to move, what to study in order to realize our plans.
Thanks in advance.

Answer 1

/ip firewall filter add action=drop src-address=ip_pc chain=forward