4 ms·
Your router doesn't care about their DNS settings. IP addresses are very easy to tie back to countries. The reason they say it's not reliable is because it's tr
by thesuitonym 2mo ago
Your router doesn't care about their DNS settings. IP addresses are very easy to tie back to countries. The reason they say it's not reliable is because it's trivial to spoof the country, but even so, a lot of attackers don't even bother. It's sort of like the Nigerian prince scam calls: if you're wise enough to block Russia, you're not worth their time.
Your firewall vendor should supply you with country lists, just select the known bad ones and drop their traffic. If you have a consumer grade router, you will probably have to configure the blocklists manually.
- lostlogin 2mo agoI wonder if adding the US is now sensible.
- thesuitonym 2mo agoUnless you're serving something, you should probably drop all incoming requests. If you are serving something, the US is a pretty big market to lock yourself out of.
- inigyou 2mo agoAlmost all spam traffic comes from the US, it's not even close. But for many people so does much of their human traffic.
- 0points 2mo agoFWIW, I blocked the US for a while. Eventually, my lets encrypt cert expired and it turns out certbot is run from USA, so the auto renewal failed me.
- numpad0 2mo ago> The reason they say it's not reliable is because it's trivial to spoof the country ISPs sometimes do trade IPv4 blocks and countries to which it belongs do change occasionally. That can become a problem if you were like literally Netflix and someone few nation states over started an ISP.