Restrict computer access to my local web server ...

write the following firewall filter rule

/ip firewall filter
add action=drop chain=forward disabled=no in-interface=ether3 src-address-list=!IPs_ALLOW

So you can add IPs allowed in address list IPs_ALLOW and all others IPs will be blocked.