Is there some reason that you can't setup your security box as a proxy, using HTTP::Proxy? Your proxy can then maintain a 'blacklist' of non-redirected requests
I suppose you could send a RST or a FIN packet to the 'evil box'. As long as you know something about IP, you can send these via a 'raw' IP socket. The standard Socket::* modules handle these operations