Block incoming connection

RouterOS Beginner Basics
1

Hi!
I have a domain on CloudFlare. My A record point to my router. I use it only for access to CRL. I want on my router firewall block all incoming connection (input chain) which point to different address than crl.domain.com/crl/*

How can I do that?

2

I use Layer7 and regex:

\ /crl/.+\.crl\ .*Host: crl\.domain\.com

Is there any other way?