Security: Need to block access to our application from a list of countries

Implement blocking of OFAC countries and sanctioned individuals (as determined by the US, UK, and EU) across the entire CB ecosystem. Country blocking should be done at the network layer based on IPs.

Implementation: For long term we will go for network firewall option which is in discussion with Verizon. As immediate solution we are pulling out range of IP address for these 5 countries (Iran,Syria, North Korea, Ukraine and Cuba.) and blocking from Application configuration settings.