Access List

Hello
We have publish a web server with a NAT role to internet and everyone has access to web sever.
Now we wont to allow access only to some public ip not to everyone.
How to do it??
Thanks!

With firewall filter https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter