I'd love to see ban user using MAC address in addition to IP bans. The IP address can change but the users MAC address rarely changes.
I noticed that the MAC address is recorded in the IPTABLES log so this should be possible.
Once an offending MAC address if found you could ban all IP's coming from that MAC address.