/ip firewall address-list
add address=192.168.0.21 list=pc
add address=192.168.0.28 list=pc
add address=192.168.0.32 list=pc
add address=site.ru list=block/ip firewall filter
add action=drop chain=forward dst-address-list=block src-address-list=!pc/ip firewall filter
add action=drop chain=forward connection-mark=Block_list_conn
/ip firewall mangle
add action=mark-connection chain=prerouting layer7-protocol="DROP remote" new-connection-mark=Block_list_conn passthrough=yes
/ip firewall layer7-protocol
add name="DROP remote" regexp="^.+(ammyy|teamviewer|anydesk|aeroadmin|logmein|beyondtrust|remotetopc|ultraviewer|litemanager|join.me).*\$"