Как правильно заблокировать домен?

[Olexandr.Horbatiuk]

Помогите настроить фаервол чтоб заблочить input и output чтоб ps4 не видела них одного хоста от account.np.ac.playstation.net

Вот мой список правил

/ip firewall address-list
add address=account.np.ac.playstation.net list=playstation
add address=a104-71-251-110.deploy.static.akamaitechnologies.com list=\
playstation
add address=ns42.playstation.net list=playstation
add address=ns36.playstation.net list=playstation
add address=ns34.playstation.net list=playstation
add address=ns32.playstation.net list=playstation
add address=ns43.playstation.net list=playstation
add address=ns41.playstation.net list=playstation
add address=ns31.playstation.net list=playstation
add address=ns33.playstation.net list=playstation
add address=ns44.playstation.net list=playstation
add address=ns35.playstation.net list=playstation
add address=192.168.2.3 list=PS4_PRO
add address=e14107.b.akamaiedge.net list=playstation
/ip firewall filter
add action=accept chain=input comment="accept establish & related" \
connection-state=established,related
add action=drop chain=input comment="drop invalid" connection-state=invalid
add action=accept chain=input comment="accept ICMP" protocol=icmp
add action=accept chain=input dst-port=1194 protocol=tcp
add action=accept chain=input dst-port=8299 protocol=tcp
add action=drop chain=input comment="drop all not from lan" in-interface=\
!bridge
add action=drop chain=input comment=account.np.ac.playstation.net \
src-address-list=playstation
add action=drop chain=output comment=account.np.ac.playstation.net \
dst-address-list=playstation
add action=accept chain=forward comment="accept established,related" \
connection-state=established,related
add action=drop chain=forward comment=account.np.ac.playstation.net \
src-address-list=playstation
add action=drop chain=forward comment=account.np.ac.playstation.net \
dst-address-list=playstation
add action=drop chain=forward comment="drop invalid" connection-state=invalid
add action=drop chain=forward comment="drop all from WAN to LAN" \
connection-nat-state=!dstnat connection-state=new in-interface=ISP
add action=accept chain=forward comment="accept http & https from LAN" \
dst-port=80,443 in-interface=bridge out-interface=ISP protocol=tcp
add action=accept chain=forward comment="accept dns from LAN" dst-port=53 \
in-interface=bridge out-interface=ISP protocol=udp
add action=drop chain=forward comment="drop all from LAN to WAN" in-interface=\
bridge out-interface=ISP