Disregard comment I don't want to edit it because I am lazy.
You can do all of this inside the asus router underneath the routes page just put this inside the asus router:
Ip address
17.0.0.0
Subnet
255.0.0.0
Destination
127.0.0.1
I have openvpn so the block will remain in effect.
I don't plan to use apple services ever again but the hard ware is pretty good.
Does this mean you are attempting to use an IP range block to avoid this "service" while continuing to use Apple hardware? How does such a block deal with say, Apple software conveniently "routing-around" what appears to be an "authoritarian government's firewall?"