Security Basics: Re: Blocking traffic by Country to reduce spam

[Guilherme Marconi de Oliveira <gmoliv () gmail com>]

Hi Paavan,

Is it the only possibility?

I did it once in a "not so large" company and we had problems with some 
departments that used to access sites worldwide (marketing, research, 
etc) while the spam problem was just like the same headache it was before.
We also had problems with some trusted ips and domais... we figured out 
that they were using routes trough non-USA/non-Brazilian ips (the 
company had almos all of business in Brazil). After a week our 
"whitelist" was so huge we decided to use focused methods to keep spam 
away (a specific solution for each spam source like email, "contact us" 
in the corporate website, company forum, etc).
As it was almost impossible to get rid of 100% spam messages, we did 
some training to teach the people there how to use their e-mail client 
program to classify messages as spam and make a better use of email 
client's filter.
Hope it helps,

(and sorry by the horrible English, I haven't used if for a long time so 
I'm kind of rust)
Gmoliv


paavan.shah () gmail com wrote:
> Hello List,
>
> One of our clients is based in USA and has most of the business in USA and UK.
>
> To reduce spam we are planning to propose them a solution to filter traffic by country.
>
> We can add IP Blocks for USA and UK as a whitelist and allow only incoming access to those IP Blocks,everything else is 
> blocked.
>
> Has anyone implemented this change on their production networks?Has it been effective to reduce spam?
>
> Please share your views and experiences
>
> ------------------------------------------------------------------------
> This list is sponsored by: InfoSec Institute
>
> Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain a laser like insight into what is covered on the exam, with zero fluff! 
>
> http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
> ------------------------------------------------------------------------
>
>   

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain a laser like insight into what is covered on the exam, with zero fluff! 

http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------