Recently we have been taksed buy C level executives to block all ip communication to Russia. They are about 65,000 (CIDR aggregated) public ip addresses in China. I dont want to manage an ACL with 65,000 entries not to mention how much larger it gets...