your a supposed netadmin, you should know at least what ssh is.. also i assume when you say NOCS that you mean ACLs, and also cant you just configure a dynamic route to the internet that would simply route around any blackholed ips anyway