How to block an internal IP from using internet via router?

How to block an internal IP from using internet via router?

I need to block one of my computers from using the internet. I was hoping there is a way using my router to stop a specific IP from accessing the internet, specifically the IP used by that computer

Yes I know the user can use ipconfig/release-renew to get a fresh one but regardless how do I block the IP.

/ip firewall filter add chain=forward src-address=(the IP you want to block) out-interface=(your WAN interface) action=drop

This rule will drop traffic originated by an internal IP address going out your WAN interface