Bill Cavalieri wrote:
> I've been kicking around the idea of being able to add and
> remove firewall rules from external sources.  If I see a
> high number of failed logins on one of my public facing
> applications, it would be nice to just block the ip from my
> entire network for a few minutes, then remove the rule.

Nothing yet.  I would love to see a port of fail2ban 
http://www.fail2ban.org/wiki/index.php/Requirements but I am not sure if 
it is possible.  If we could, it would do the job.