problem when block site to specific IP/user

RouterOS General
1

Hello,

I have the following set-up at home
ROUTER ---->(port 1) Mikrotik(bridge mode/firewall) (port 4) ----> SWITCH --(wireless)–> USERS

I have enabled IP f/w, created layer 7 protocol for blocking site (e.g. youtube, regexp → ^.+(youtube.com).*$ ), created address list with specific IP and created filtered rule
that drops connection (forward chain, layer 7 protocol selected, src address list selected, action drop). But it doesn’t work !
I will appreciate any ideas you give me for making this works !!

Thanks in advance

(hw offload of port 1 that connects bridge to router is off)

2

Layer 7 does not work well due to https, use TLS Host.

https://systemzone.net/mikrotik-blocking-websites-with-tls-host-firewall-matcher/

3

Unfortunately did not work either.
Traffic passes through
:frowning: