you can enter any plain text into the CONTENT field on a firewall rule and it will block any packets containing that. Make sure you specify port 80 and that it's not going to interfere with other traffic and you should be good. We use it to block UserAgents in the HTTP headers all the time.