The most secure shield is to drop 0.0.0.0/0. IP addresses can't be malicious - they are just numbers.