A cron job on the network gateway that creates iptables rules to drop connections to x IPs sounds like a good plan.