https deny( block ) how come ???

This post might be helpful:
http://forum.mikrotik.com/t/i-want-to-block-the-facebook-in-my-internal-network/49776/1