Quote:
	
	
		| 
					Originally Posted by Big E
					
				  use iptables/ipchains to block at the packet level. | 
	
 This is the best way here - block specific hosts which you think may cause trouble at the packet level, and then grant access to specific hosts which you want to be able to run queries. If I were you, I would avoid pattern matches/wildcards in your access allowances - just list each allowed host seperately.
Also, make sure you're on a switched network, or all this filtering is moot.