Maybe an overly shotgun approach for your tastes, but I personally firewall off all IP blocks from APNIC (the Asian-Pacific RIR) delegated to the southeast Asian countries (China, Korea, Vietnam, Thailand, Laos, Hong Kong -- yes, I know it is not a country). Over 90% of my port scans, my dictionary attacks and my problems seem to come from there.
If you take that approach, definitely don't block all the aggregate APNIC ranges. That would exclude quite a few Australians and New Zealanders. There are plenty of lists available online reliably of the blocks delegated by country, with a specific focus on that region. It is not an uncommon practise among sysadmins. -- Alex Balashov Evariste Systems Web : http://www.evaristesys.com/ Tel : (+1) (678) 954-0670 Direct : (+1) (678) 954-0671 Mobile : (+1) (706) 338-8599 _______________________________________________ --Bandwidth and Colocation Provided by http://www.api-digital.com-- AstriCon 2008 - September 22 - 25 Phoenix, Arizona Register Now: http://www.astricon.net asterisk-biz mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-biz
