Originally Posted by v2micca
And part of properly protecting your network is limiting IP ranges. At my job, I can't legally block countries out of hand. But you can be damn sure the only traffic I'm allowing from them is port 80 and 443.
If you have to do business with people in those countries then you really have no choice.