Interesting idea. I guess that using arp you could indeed ban by mac address; but then you would have to ping every person and resolve their address to a MAC to check it, which could well be a bit of a killer.