I have a requirement to drop network traffic from countries which the United States is under an embargo with. Dropping traffic from certain CIDR blocks is trivial to do with AWS VPC, but I am curious about how to test whether or not my implementation is working correctly.
The options I have determined are:
- Block the CIDR range of my own US-based traffic to determine if it drops
- Locate a VPN service which terminates in one of the embargoed countries
In 2016 the embargoed countries are:
- Iran
- North Korea
- Sudan
- Syria
- Myanmar
I am concerned about the legal ramifications of option 2, and the validity of the results generated by option 1.
Are there any suggestions on how to proceed?