You dont need access on the isp router. One of the easiest way to do what you need on mikrotik : 1. create address list for the address from isp router lan side you want to block: add address=192.168.0.10 list=block_upper add address=192.168.0.20 list=block_upper add address=192.168.0.30 list=block_...