There were things like issues with a VPN change-over that were horribly mismanaged. I certainly wouldn't credit his termination to this alone. Modern firewalls and good configurations *should* prevent the need to do it.A simple rule to permit SMTP from anywhere to your mail servers before the geo block solves that problem.He wasn't the brightest guy. I'd say be careful if you actually consider doing this because it could actually bite you in the butt. There was no written policy backing it up. It was such a headache and all we could do was point fingers. However, when the company began to do consulting work in China, it just lead to headaches because we had in-house email at the time and emails from China could not enter no matter what.
Now I will say it helpped with things like port scanners, DDoS, etc. Also the vanity domains are nothing but a cesspool for crap, case and point: Īt my old job the network admin (who was later fired) blocked all IP ranges from China and Russia to 23 offices and our data center. The opposite is also true, crooks will buy a VPS on Amazon or Azure and so their bad traffic all looks like it's coming from a US IP address, when they are in-fact overseas.Īlso important I think is blocking ccTLDs and vanity domains, many bad links in email/spam are to *.ru addresses my users have no business reason to get to. Note that just because you block an IP that looks to be owned by a Russian company/ISP, doesn't mean the users on that system are in Russia, they could very well be remoting in from elsewhere, like the US, or China, to make the blame appear to be from whoever they want. OVH France's netblocks are almost entirely blocked by me, as we don't do business in France, and there seems to be nothing but compromised servers/websites hosted there. People forget the work Internet connection is for work, not their personal social-media-shoe-shopping-cat-video-time-wasting experience - their employer is paying for that Internet connection, not them, they can do that other crap at home or on their mobile.
I also block US based IPs that are from known companies who supply VPS's to China, Russia, or I don't discriminate: If it's not needed for us to be in business, then we're not going to allow it.
0 kommentar(er)
