good job,
now paypal entries in walled garden don’t work. Because paypal uses some dynamic services additionally which can not be determined directly. I’ve asked Mikrotik, but they don’t know how can be set this over static way
You can set dynamic dns in walled garden. See here http://wiki.mikrotik.com/wiki/Dynamic_DNS_Update_Script_for_dynDNS
Alternative for that you can do it
/ip hotspot walled-garden add action=allow disabled=no dst-port=443 server=hotspot1
but all https connections with this solution are freely accessible