I've been talking about this before, not on the forums but on irc, but never got any response so im trying here now
Why not be able to use like:
site addip !*@213.65.*.* which refuses connections from 213.65.*.*
That would be a easy way to block specified IP's for those who don't want to set up an firewall or something similar...