RE: Blocking traffic by Country to reduce spam

["Andreas Heinzelmann" <Andreas.Heinzelmann () pharma-westen com>]

Hi,

IP Blocking based on country allocation is the worst you can do. Picture
this: your customer is on a business tripp in India and it is not
possible
to access resources due to his then Indian IP.

I made the same experiences with my Bank Account in the US. At present I
am located in Europe and I am not able to access the Banks webpage (and
the Web-Banking) due to this horrible IP blocking based on Countries.

Br....Andreas
 
-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of paavan.shah () gmail com
Sent: Monday, June 22, 2009 4:38 PM
To: security-basics () securityfocus com
Subject: Blocking traffic by Country to reduce spam

Hello List,



One of our clients is based in USA and has most of the business in USA
and UK.



To reduce spam we are planning to propose them a solution to filter
traffic by country.



We can add IP Blocks for USA and UK as a whitelist and allow only
incoming access to those IP Blocks,everything else is blocked.



Has anyone implemented this change on their production networks?Has it
been effective to reduce spam?



Please share your views and experiences

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both
Instructor-Led and Online formats is the most concentrated exam prep
available. Comprehensive course materials and an expert instructor means
you pass the exam. Gain a laser like insight into what is covered on the
exam, with zero fluff! 

http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------