You may not need to block all of your overloaders
Eg mail or web service -
put overloaders in a minimal-bandwidth queue (ALTQ)
rdr overloaders to specific site