Is there any advantage to creating a custom atomic signature that blocks the IP address vs making a host block that does not time out? Seems to me the first would give a lot more logging options, but the second method would be a bit simpler for engi...