It seems like maybe the suggestion was a way to reject a connection based on the address without having to accept it first. I could be wrong.