hotspot wall garden - block ports?

RouterOS General
1

Hello ,
I want to know how can I block in the firewall user from my hotspot to reach to my server
my server is 10.0.0.200 , my hotspot users are 192.168.1.0/24

I have done this :

/ip firewall filter
add action=reject chain=input disabled=yes dst-address=10.0.0.200 dst-port=\
    0-65433 protocol=tcp reject-with=icmp-admin-prohibited src-address=\
    192.168.100.0/24
add action=reject chain=input disabled=yes dst-address=10.0.0.200 dst-port=\
    0-65433 protocol=udp reject-with=icmp-admin-prohibited src-address=\
    192.168.100.0/24

but when I do port scan from the user i can still see some port open , and also I don’t see any data in the firewall
so what am I doing wrong?
Thanks ,