Blocking countries with pf

I came across a post on reddit sysadmin today asking the question "Do you block all Chinese IP addresses?". I wasn't sure if this would be a good idea, since I know a number of people from China access some of my papers. However, people accessing my work would surely use my university email address, so there is nothing stopping me from trying this for email. Hopefully it will cut down on a lot of spam.

I followd the jist of this page, and blocked all of the subnets in the files listed there. These include:

• China
• Azerbijan
• Belarus
• Kazakhstan
• Kyrgyzstan
• Russian Federation
• Tajikistan
• Turkmenistan
• Uzbekistan
• Viet nam

Not sure how this works, might be worth adding a note to my contact section if I decide to keep this set up. I'll keep an eye on my incoming spam…

Tags: openbsd networking