Right. It also does DNS poisoning, URL word analysing, deep packet inspection, and VPN identification & blocking. I meant it only directly blocks the worst IPs, as opposed to directly blocking all external IPs.

I do wonder whether a US Firewall will be worse or better than China's. On one hand, the US is presumably less autocratic. On the other, we have 10x the defense resources.