Well, I have to admit that at some point I was considering removing it. Well, let's just say that some people were very vocal against it. So I decided to leave it in and just warn people through the documentation that IP blocking is not a very bright idea. I mean, it's not even a security feature.
Example: Alice blocks all countries except USA from accessing her site. Bob lives in Australia. Bob pulls up a list of open proxy servers located in the USA and connects to Alice's site through it. Since Alice's site sees an IP in the USA (the proxy's IP!) Bob is allowed in. Alice decides to ramp up security and disables access to anonymising proxies. Bob is not a stupid fella, though. He subscribes to a cheap SSH service located in the USA and uses port forwarding. Poor Alice can't block Bob and throws in the towel.
Yes, IP blocking is adequate to block Joe Average who can't use Google to find a workaround to IP blocking, but it's no match for hundreds of tutorials and hackers. But there are still some people who are only interested in blocking Joe Averages, so there you have it: the IP block stays.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!