web proxy: how to deny all .exe except a certain one

dear mikrotik users.
i have a question.
web proxy is functioning well, and i can deny and allow any extension or file.
i know how to deny *.exe files , by putting *.exe to deny all exe files to be downloaded. what if i want exe files from a certain domain to be accepted?

for example i want to deny *.exe files but allow *example-file.exe . is it possible? thank you.

try adding that one as an allow rule and place it above the deny rule.

can u please be more specific, im kinda new . which one do i add above which one. thank u

The rules in the access list of the proxy, are executed in order. A packet that matches the the first
rule, does not get processed further down on the other rules, and so on. So you can put the rule
that allows connections to the dst-host=example-file.exe above the rule that denies connections
to all the exe files