/ip firewall filter

add action=reject chain=forward comment=Social layer7-protocol=Social protocol=tcp reject-with=tcp-reset

/ip firewall layer7-protocol

add name=Social regexp="^.+(vk.com|vkontakte|ok.ru|odnoklassniki|facebook.com|loveplanet.ru|ammyy.com).*\$"