Do a better job of keeping firewalled clients out of the peer database.
Add a rejection_reason to rejection messages and log them when your connection is refused.