A1: blacklist CF IPs

Signed-off-by: Jared Carroll <jcarroll@pivotallabs.com>