implement the forbid_ip tool