pfBlockerNG on pfSense does industry-standard DNSBL and IP filtering. That'd be an entirely separate alternative to what you just set up though, and quite a bit more complex.