Shorewall users - Mar 2006 - how to I dynamic block an IP from localnet to accessing a service ?

I found that shorewall drop command only drop a IP
but I want to drop a service e.g. http (80) from that IP


AS because I want to put this on a cron job