Would be very helpful to have a firewall rule that would deny specific IPs. We currently have implement our own blacklist via iptables.