You may not need to block all of your overloaders
Such as a mail or web service -
put overloaders in a minimal-bandwidth queue (ALTQ)
rdr overloaders to specific site/address