: They're actually very easy.  The software doesn't permit you to do anything further reaching than, say, 127.0.0.0/16, which would block 127.0.*.* only.  So you can't mess up and block the entire British Empire or anything )