Because of the distance, having line of sight, you can use practically any device (120° minimum aperture). But you have to take into account how much bandwidth you want delivered through those links, just like if you connect directly to clients or a general station in each building
Hi, yo can add to address-list your Permited URL (without http:// or https://) an then block all http/https (except your "Permited URL") /ip firewall address-list add address=your-webpage list="Permited URL" /ip firewall filter add action=drop chain=forward disabled=no protocol=t...
The quickest and easiest is to use quick-set (PTP Bridge AP & PTP Bridge CPE modes) and once installed align both sides at the same time (requires two people communicating with each other). If you have visual with the other end you can visually aim roughly and then fine-tune
I recommend you to use HomeAP mode and if your WAN takes internet through pppoe client, you must enter the name and password of the connection (pppoe dial out)