That should be it! When you open your DC client and connect to the HUB, you may get a notice from little snitch that your client is attempting to connect to xxx or xxx is attempting to connect to your client: you should select the 'deny until quit' option from little snitch. Such notices generally pop up when someone from off campus tries to download from you. Note that even if you're not around to press the deny button, the connection will still be blocked.
The above may interfere with the running of some DC clients, as they may try to connect to certain sites for their own reasons. I can confirm that it doesn't seem to break Valknut.