Given an IP address, how can I prevent any connection both to and from that IP? If there are multiple methods, please describe the pros and cons of each.

I've found a lot of contradictory and confusing information about this online and in the documentation.

Thanks for any help!