how to block vpn user access routeros?

how to block vpn user access routeros (winbox or web?)

Since it is a VPN user, it has a specific VPN pool right?
At least that how it should be…
Block the address of that VPN user for all the input traffic…

input chain in filter?

Yes…
input - used to process packets entering the router through one of the interfaces with the destination IP address which is one of the router’s addresses
https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter#Chains

is work. Thank you

You can mark the post as solved…