Block network ID /16

HI,
I am new in mikrotik, so I need help to block specific range of IP address(Network with /16) to not access private tunnel(proxy/vpn).
Hope for prompt response from advance users and support team.

/ip firewall filter
add src-address=10.10.0.0/16 out-interface=yourtunnel action=drop

-Chris

Thank you very much