Making an IP in-accessible from the web

Hello,
I’m currently running RouterOS v6.27

My network setup is as follows:
Uplink from ISP → Routerboard → Switch → a few devices here
ether1 is the uplink from the ISP
ether2 is a slave of ether1 and where the switch is plugged into

I plan to use the routerboard mainly as a firewall to drop connections to a few static web/word reachable IP addresses

Here’s what I’ve tried so far but it doesn’t drop the connection to that IP address:

The DST-IP address still resolves and loads fine from the web even after this rule has been added.

Any help would be greatly appreciated.

Thanks!

Hello, you can keep blank source address and change your chain to Forward.

Forward chain. Input is for protection of router itself.