4 ms·

We've had a similar discussion at my work. E-commerce that only ships to North America. So blocking anyone outside of that is an option. Or I might try and put

We've had a similar discussion at my work. E-commerce that only ships to North America. So blocking anyone outside of that is an option. Or I might try and put up Anubis only for them.

redirectyou 10mo ago
[dead]
FabCH 10mo ago
Be slightly careful with commerce websites, because GeoIP databases are not perfect in my experience. I got accidentally locked out from my server when I connected over Starlink that IP-maps to the US even though I was physically in Greece. As a practical advice, I would use a blocklist for commerce websites, and allowlist for infra/personal.
- ThatPlayer 10mo ago
  That's a good point! I'll probably start with a blocklist.
- dotancohen 10mo ago
  There is a small OTC medical device that is about $60 in the US, quadruple the price in my country. I tried to order one to be sent to a US family member's house, who was coming the following month to visit. However I could not order because I was not in the US. In the end I found another online store, paid $74, and got the device. So the better store lost the sale due to blocking non-US orders. I don't know how much of a corner case this is.
lsaferite 10mo ago
Just keep in mind, that could block legit users who are outside the country. One case being someone traveling and wanting to buy something to deliver home. Another case being a non-resident wanting to buy something to send to family in the service zone. I'm not saying don't block, just saying be aware of the unintended blocks and weigh them.
- fragmede 10mo ago
  Also consider tourists outside of their home country. If, eg I'm in Indonesia when Black Friday hits and I'm trying to buy things back home and the site is blocked; shit. I mean, personally I can just use my house as as a VPJ exit node thanks to Tailscale, but most people aren't technical enough to do that.
- DANmode 10mo ago
  Great comment - thank you.

We've had a similar discussion at my work. E-commerce that only ships to North America. So blocking anyone outside of that is an option. Or I might try and put up Anubis only for them.

redirectyou 10mo ago

[dead]

FabCH 10mo ago

Be slightly careful with commerce websites, because GeoIP databases are not perfect in my experience. I got accidentally locked out from my server when I connected over Starlink that IP-maps to the US even though I was physically in Greece. As a practical advice, I would use a blocklist for commerce websites, and allowlist for infra/personal.

ThatPlayer 10mo ago
That's a good point! I'll probably start with a blocklist.
dotancohen 10mo ago
There is a small OTC medical device that is about $60 in the US, quadruple the price in my country. I tried to order one to be sent to a US family member's house, who was coming the following month to visit. However I could not order because I was not in the US. In the end I found another online store, paid $74, and got the device. So the better store lost the sale due to blocking non-US orders. I don't know how much of a corner case this is.

lsaferite 10mo ago

Just keep in mind, that could block legit users who are outside the country. One case being someone traveling and wanting to buy something to deliver home. Another case being a non-resident wanting to buy something to send to family in the service zone. I'm not saying don't block, just saying be aware of the unintended blocks and weigh them.

fragmede 10mo ago
Also consider tourists outside of their home country. If, eg I'm in Indonesia when Black Friday hits and I'm trying to buy things back home and the site is blocked; shit. I mean, personally I can just use my house as as a VPJ exit node thanks to Tailscale, but most people aren't technical enough to do that.
DANmode 10mo ago
Great comment - thank you.