Firewalls use both whitelists (trusted) and blocklists (known bad actor) to handle traffic. That is essentially both opt-in and opt-out, depending on circumstances.