[geeks] .hk, .cn, .info considered harmful

[Phil Stracchino]

Everyone's probably seen the report by now, citing that in these three
worst TLDs, as many as one site in ten carries a payload of malware.
So, since the kids aren't good at paying attention to such things, I
decided in the interest of safety to block all traffic to and from those
TLDs at the firewall.


Problem:  What netblocks to actually block.  I managed to find one site
offering a list of .cn and .hk netblocks; the combined total is over
10k, gzipped.  There's got to be a better solution than that.

Any suggestions?


-- 
  Phil Stracchino, CDK#2     DoD#299792458     ICBM: 43.5607, -71.355
  alaric at caerllewys.net   alaric at metrocast.net   phil at co.ordinate.org
         Renaissance Man, Unix ronin, Perl hacker, Free Stater
                 It's not the years, it's the mileage.