The .php block gave me a good laugh. Great idea. Just rejecting /wp-admin.php should reduce load significantly. :)