add a new option "block IP address" in firewall alarm

I want CFP add a new option “block IP address” in firewall alarm. thus we can put the doutbful IP into “my blocked network zones” when I found a process wants to connect out to a doutbful IP or a doutbful IP wants connect in.