Block malicious traffic early