Firewall

Hi

I want enable LAN (files server)
I want disable INTERNET(youtube,facebook,etc) without DST IP becouse there is mail-server (in another city.. (outlook) for production computers.

This configuration works but after restart PC users do not have internet after restarting the computer and they have no connection with the mail ( 0 internet)




now i block temporarily using proxy 127.0.0.1 but i want central management with mikrotik router.

Please help me