Help! Simple question? Blocking internal rogue IP?

You can export your current configuration, edit/replace possible sensitive data and post it here.
Some experienced members in firewall rules may then be able to give you some advice.
Use this post as a guide on how to create the export and post it:
http://forum.mikrotik.com/t/forum-rules/173010/1