Block ads and BitTorrent

Routing → Basic Routing.

• Block BitTorrent Protocol is on by default. The ports BitTorrent clients use by default are dropped in the kernel, before any counting, so nothing dropped is billed. A client moved off them is not caught.
• Block IPs carries geoip:private by default, so customers cannot reach your LAN or the server's own private networks.
• Add to Block Domains the names to drop; an ad list's domains paste straight in. The panel resolves them and refreshes them every 15 minutes. It is the addresses that are blocked, so write each name you mean (www.example.com as well as example.com).
• Add to Block IPs an address, a range, or geoip:xx for a whole country.
• Block Ports stops a port for everyone; 25 keeps customers' spam from being reported against your address.

Press Save; it is applied at once. Check what the kernel holds with:

nft list chain inet wui_policy wui_block

To block for one customer or one group only, use a rule instead: Routing → Routing Rules → Add rule, with User or Group set to the ones to block, Domain or IP to the destinations, and Outbound tag to blocked. See Routing.