ipclassify is a Linux user space application that blocks/marks connections from/to hosts based on lists specified in a configuration file. Currently, the block lists are in the format and obtained from iblocklist.com. If you are familiar with moblock then you know, essentially, what ipclassify is. The difference is that ipclassify can have multiple NFQUEUEs and is threaded (pthreads).