6
You should be able to ban an IP range with a regular expression in the ban IP field in the general settings. I know nothing about regex, so I haven't tried it - and there have been reports that it did not work perfectly - but it's worth the try.
On the downloads question, WF-Downloads supports permissions on a per-category and per-item basis. It's available on www.wf-projects.com