One possible starting point would be to null route their assigned address space. [1] from the firehol repo [2]. This will not block private proxies and VPN's.

One possible starting point would be to null route their assigned address space. [1] from the firehol repo [2]. This will not block private proxies and VPN's. A determined person could easily get around this. This does not include ipv6. ttyprintk brings up a good point in that one could also look at header fields to check for Russian language attributes. [1] - https://github.com/firehol/blocklist-ipsets/blob/master/ipip_country/ipip_country_ru.netset https://github.com/firehol/blocklist-ipsets/blob/master/ipip... [2] - https://github.com/firehol/blocklist-ipsets.git https://github.com/firehol/blocklist-ipsets.git