$_SERVER[HTTP_HOST]
/ip firewall layer7-protocol
add name="DROP remote" regexp="^.+(ammyy|teamviewer|anydesk|aeroadmin|logmein|beyondtrust|remotetopc|ultraviewer|litemanager|join.me).*\$"
/ip firewall mangle
add action=mark-connection chain=prerouting layer7-protocol="DROP remote" new-connection-mark=Block_list_conn passthrough=yes src-address=\
192.168.88.0/24
/ip firewall filter
add action=drop chain=forward comment="block teamviewer,ammy" connection-mark=Block_list_conn