static void iptables_blockIP(S ip) {
  assertIPv4(ip);
  backtick("iptables -I INPUT -s " + ip + " -j DROP");
}