> In my professional life, I see frequent requests of this nature from > customers in western/English-speaking countries. My immediate > response is, "you *are* aware that Australia and New Zealand are > part of APNIC, right?" http://ftp.apnic.net/stats/apnic/delegated-apnic-latest http://ftp.apnic.net/stats/ripe-ncc/delegated-ripencc-latest I've used the above lists to block only certain countries of the APNIC with some degree of success. ie... $codes = "CN,HK,TW"; // China, Hong Kong, Taiwan OR $codes = "RO"; // Romania Then I only blocked the subnets for those countries in iptables.