I set up a cutsom template to add 'permanent' firewall block rules for various ip's when I first set up e-Smith. That static list has grown to about three dozen entries at this point. At any given time, snort/guardian also has about that many block rules in place.
I was wondering if anybody has any statistics on the impact to network performance as the number of added rules grow.