http://forum.mikrotik.com/t/how-can-i-block-the-host-to-access-internet/11144/9
some example (use search)