blacklist an IP: route add -host ip.or.host.of.badguy reject