03-28-2022 06:00 PM
I can not get my head around how to do this.
Allow smtp from a country but block every other service, application.
You can negate countries but not services/applications.
can one do any/any with an exception?
03-29-2022 08:52 AM
Your question is a bit open ended... Do you want to block everything but SMTP from a specific country? Or block all traffic to anywhere, except for SMTP from a specific country? Generally you are going to want to try and build rules with specific allows, followed by global drops for anything else.
03-29-2022 12:58 PM
Allow smtp from 1 specific country but block every other service, application from that 1 specific country.
03-29-2022 04:09 PM
It of course depends on you other rules, but something like this would allow SNMP inbound, but block all other traffic:
If you also want to block requests outbound to that country:
3. Name="Block all traffic outbound to El Salvador", SrcZone=LAN, SrcAddr=any, DstZone=WAN, DstAddr=Regions:SV, Application=any, Service=any Action=Drop
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!