• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

How to block non-U.S. IP ranges

Icepick

Diamond Member
I'm tasked with configuring my company's firewall. Our business model is such that there should be nobody accessing our website from outside of the U.S. To lock down the firewall as much as possible I'd like to configure it to block all IP address ranges that originate from outside of North America. Is there a way to find out what these are so that I can create a policy that would implicitly deny traffic originating from outside North America?
 
you sure that is wise? We have alot of US based customers that route everything back to the motherland including email?
 
why don't you just load a reputation list into the IPS? heck most IPS vendors sell/give you a rep list since it's quite easy to have rogue usa ip's too. too dynamic.
 
why don't you just load a reputation list into the IPS? heck most IPS vendors sell/give you a rep list since it's quite easy to have rogue usa ip's too. too dynamic.

I'm putting a pair of IPS's in front of the firewalls and they'll be managed by the vendor. I don't have much experience with those. I'll have to look up the reputation list - never heard of it.
 
Back
Top