Blocking Traffic by Country on Production Networks

Blocking Traffic by Country on Production Networks
Timothy M. Mullen

When I originally posted to Bugtraq regarding the use of country-by-country sets to control traffic to or from any particular country, I knew that it was not a new idea. However, applying the concept for use with Microsoft's ISA Server was at least a new application for it, and apparently has had some utility for people based on the thousands of downloads that have been made of the free sets from the Hammer of God Web site.

Expand all | Post comment

Blocking Traffic by Country on Production Networks 2008-07-20
Anonymous (1 replies)

Re: Blocking Traffic by Country on Production Networks 2008-07-22
Anonymous (1 replies)

Re: Re: Blocking Traffic by Country on Production Networks 2009-01-05
Anonymous

Blocking Traffic by Country on Production Networks 2008-07-30
Anonymous

Blocking Traffic by Country on Production Networks 2008-08-18
Jason Bevis

Blocking Traffic by Country on Production Networks 2008-09-16
Narsi

Blocking Traffic by Country on Production Networks 2008-10-17
IT Dude

I've been doing this for two years now, this is nothing new to me. I've heard peers state how it's a bad idea, I beg to differ. Since I've started blocking Asian countries, my malicious traffic (including spam) has declined in upwards of 80%.

For the clown who stated "slammer requests are spoofed. good job champ", makes no difference if it's spoofed or not, it still gets blocked if you know what you are doing.

The only real downside is, the list is so large that it takes most firewall appliances a good deal of time and resources to blacklist the enormous amount of IP information.

Cheers

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1900/1207#1207

Blocking Traffic by Country on Production Networks 2008-10-31
Anonymous