It would be cool if, when looking at the logs, there was another option after block ip and cancel, that said "would be blocked by" where it tells you which of your rules or filters would have blocked it. That way you can use your lot to analyze better which rules would stop which types of ...