I tend to work with whitelists instead of blacklists: I add only the IP ranges used by my ISP to the firewall whitelist. Most countries can't even ssh to my mac

I tend to work with whitelists instead of blacklists: I add only the IP ranges used by my ISP to the firewall whitelist. Most countries can't even ssh to my machines if they wanted to.