Quote:
Originally Posted by motion
Yeah, we're blocking country-specific IPs. The bulk of my biz is US-based, so that is doable. But, can't they just use a VPN to emulate a US-based IP?
|
If a sophisticated user (with the knowledge, tools, and appropriate access) used VPN to access a US based network, then you are correct, a firewall block wouldn't be sufficient for that scenario either. I would seriously doubt if that's the nature of your attacks however. I was just throwing out "that idea" based upon your comment about attacks coming from other countries and based upon the number of native IP "foreign attacks" (from just a handful of countries) that I (we) experienced daily. It's really quite complex (as I'm sure you know), but if the stakes are high enough, most hackers can be thwarted (even domestic ones), but like I told 'em in the banking environment a couple of decades ago...If you're connected to the Internet, then you ARE exposed...so now you're back to "the cost of doing business" as it were
. Good luck!