Block Specific Port Range for entire LAN?

I've searched here and only seem to find threads for blocking content on a specific device, but what if I want to block a port range or IP range for the entire network?

Running Merlin 378.56_2 on an RT-AC68P.

Thanks!