What are best practices for denying access from a country – say, China? I'm using UFW. I'm seeing a lot of access from Chinese IPs that isn't legitimate and don't expect much (if any) legitimate access, so this seems like it might be prudent. Thanks.
