What would be the most efficient way of blocking a list of IPs in Windows 2008's Local Security Policy?
Ideally, I would want to block the subnet that the IPs belong to. What IP subnets should I be blocking then?
What would be the most efficient way of blocking a list of IPs in Windows 2008's Local Security Policy?
Ideally, I would want to block the subnet that the IPs belong to. What IP subnets should I be blocking then?
The more effective way is to block them in Windows Firewall. That has nothing to do with local security policy, other than perhaps pushing out the firewall rule to multiple Windows computers. The path to that policy is Computer Configuration >> Administrative Templates >> Network >> Network Connections >> Windows Firewall.
The most effective way is to block them at your hardware firewall. That is, if they're a menace to the whole network and not just a few specific Windows machines. I prefer to offload sweeping rules like that to hardware and not burden my hosts. It's also administratively easier to manage.
Finally, you can't know how those IP addresses are subnetted by the various providers or single provider that owns that IP space. If you're feeling adventurous, you can just block the 175.44.., 175.42.., etc. space and hope that no-one legitimate is blocked.