> just block the entire countries network range(s) Why not just block all the inbound connections you don't need? Is there a particular reason your firewall po

> just block the entire countries network range(s) Why not just block all the inbound connections you don't need? Is there a particular reason your firewall policy needs to be xenophobic?