Restrictive v permissive Firewall policies

[Loerie]

Firestarter has 2 options:
Restrictive by default
Permissive by default

Let's assume one selects 'restrictive' and whitelists port 80.

Let's assume I don't want a connection with ip address 111.222.211.112 (example) which legitimate could use port 80.

How can one blacklist this ip address in a 'Restrictive by default, whitelist traffic' mode?

Thanks

[Elfy]

Thread closed. Please do not post duplicates, it dilutes community effort.