Easiest way to block a static ip from the outside world

I was just wondering what is the easiest way to block single static ip addresses from accessing the internet, I know the code is probably pretty simple but I am a little new to routeros.

/ip firewall filter
add action=drop chain=forward comment="" disabled=no src-address=192.168.1.1

This code will drop all traffic from 192.168.1.1
Place the rule before any other rule that accept traffic generically