iocaine has shipped firewall support to temporarily drop traffic from IPs after you've fed them an appropriate amount poison. More people should enable it.

You should not traffic shape the egress lest you run out of workers handling legitimate traffic. You should also make sure connections are appropriately terminated on your side for the same reason.