Filter By Country Code

[Trevor Walraven]

I apologize in advance if this is an easy question, but our IronPort configuration has been working fine and we haven't had to change much (if any) since I took over.  We have a C360 and what I'm looking to do is explicitely block mail coming from a specific TLD (ccTLD).  We've seen a massive influx in spam from a particular country and it is generating DNS lookups that I'd like to stop.  Basically I want to drop all mail coming in from that ccTLD and stop it ever makes it to the point that we start doing reputation/dns lookups.  Any advice on how this can best be accomplished?

Thanks!

Trevor

[Stephan Bayer]

Trevor,

This is a good question. Have you considered blocking the IPs at your firewall?

Firewall - Country IP blocking:

http://community.spiceworks.com/topic/149633-best-free-fiewall-with-country-ip-blocking

Hope this helps.

Stephan