And by subnet, and by named list, and by port, and by bunches and bunches of different criteria. Heck, it'll even block IM traffic over HTTP. You can probably get away with setting a firewall rule, ...