Filtering access to IPs

Hello,
I have a mikrotik setup in my lab with the following setup:

Uplink from ISP → Mikrotik → Switch → Various devices

eth1 is the uplink from the ISP
eth2 is a slave of eth1 and is the uplink for the switch.

Some of the devices have world accessible static IPs assigned to them, I would like to drop access to these IPs from all over the world for sometime.

I have tried using the firewall option but it just doesn’t work :confused:

Here’s the current rule I have