LAN Outgoing Trafic

RouterOS General
1

In my mikrotik device, I need to add address list and allow access them to all my LAN devices. for that I have created firewall address list named as “Allow_Internet” and tried to match list with my masquerade. then I can ping those address. but when I try to access from browser it take too long time loading and load requested pages without images and styles. I need to resolve it. here is my configuration

/ip firewall address-list
add address=kaputa.com list=Allow_Internet
/ip firewall nat
add action=masquerade chain=srcnat dst-address-list=Allow_Internet \
    out-interface=ether1 src-address=192.168.5.0/24

my requirement is block all outgoing traffic without kaputa.com for Local PCs (192.168.5.0/24)

2

Limiting outgoing connections should not be done by selectively performing SRC-NAT (well, it works but your LAN addresses leak out from your network), you really should drop them using firewall filter rule.

Next: the images not loading: are you sure they are actually hosted on same web server? These days web page elements are often hosted on some CDN or are cross-site linked. So you should open web page (which doesn’t load properly) with a browser while developers’ tools are enabled. This way you’ll see which page elements are not loaded and where these are supposed to come from.

3

Your words are confusing…

In a normal scenario
a. all users have internet access
add chain=forward action=accept in-interface-list=LAN out-interface-list=WAN

If you wish to only allow some user out to the internet You can do it multiple ways…
Create a firewall address list of those not allowed internet access=NOT
add chain=forward action=drop out-interface-list=WAN src-address-list=NOT
add chain=forward action=accept in-interface-list=LAN out-interface-list=WAN

OR combined
add chain=forward action=accept in-interface-list=LAN out-interface-list=WAN src-address-list=!drop

b. If on the other hand your issue is EXTERNAL users need access through your router to LAN devices (such as servers etc.).
Then this IS NOT accomplished via firewall rules but is done through NAT RULES and in particular dstnat rules.
(one does need a single forward chain rule in general to allow port forwardings).

https://forum.mikrotik.com/viewtopic.php?t=179343

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

A clearer set of requirement will aid in any assistance.