RE: Blocking traffic by Country to reduce spam

["Tom Farrar" <tom.farrar () it-ps com>]

I've used this method before, and it is effective. My problem with it is
the risk to reliable mail delivery; who knows when someone outside of
the UK/USA or with a mail relay in Paris will need to mail you. I mean,
I never e-mail outside of the UK or USA, but I'd go batsh!t if gmail
started blocking based on originating country.

Now i tag mail from Argentina, Brazil, Chile, China, Colombia, Russia
and Turkey; I also tag the following character sets: Arabic, Chinese,
Russian, Thai, Turkish and Vietnamese.

My opinion is to stay away from blocking based solely on the originating
country.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of paavan.shah () gmail com
Sent: 22 June 2009 15:38
To: security-basics () securityfocus com
Subject: Blocking traffic by Country to reduce spam

Hello List,

One of our clients is based in USA and has most of the business in USA
and UK.

To reduce spam we are planning to propose them a solution to filter
traffic by country.

We can add IP Blocks for USA and UK as a whitelist and allow only
incoming access to those IP Blocks,everything else is blocked.

Has anyone implemented this change on their production networks?Has it
been effective to reduce spam?

Please share your views and experiences

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both
Instructor-Led and Online formats is the most concentrated exam prep
available. Comprehensive course materials and an expert instructor means
you pass the exam. Gain a laser like insight into what is covered on the
exam, with zero fluff! 

http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------





------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------