I think a good start would be filtering out access to all government IPs.