the risks of blocking IPs
Rust: If you block IPs, try to be as specific as possible. There was a popular site I couldn't reach for months from my home connection, but full of info I liked. I finally emailed the owner from work and found out that he had blocked my entire class B (xxx.xxx) range due to spamming. This has happened more than once, unfortunately.My rule of thumb is to block small first, then wider based on the registrant of that IP. Russia and China seem to have the most spam-bots running (or at least the most aggressive), but as long as you block at the xxx.xxx.xxx level, you shouldn't impact actual users very much.Like barredo said though, include some information on your 403 page.