Network Security: Services Support for Country Blocking
the country blocking is a very good idea.
we get a lot of intrusion from china to our terminalserver. the best extension would be if we could limit it to services looks like RDP, VNC
13 comments
-
Exodus Naixus
commented
Please also vote for Country Blocking With Exceptions located: http://feature.astaro.com/forums/17359-astaro-security-gateway-feature-requests/suggestions/1366019-country-blocking-with-exceptions?ref=title
Both of these requests are nearly the same. Thanks - Exodus Naixus
-
anagh
commented
if possible incorporate it in your next release
-
anagh
commented
very useful feature to prevent hacking
-
dswartz
commented
And possibly also restrict to blocking inbound only.
-
flaserra
commented
I would inform you that there is a very similar idea with a lot of votes. Perhaps it's better to move your votes here:
http://feature.astaro.com/forums/17359-astaro-security-gateway-feature-requests/suggestions/1102495-country-blocking-with-service-restriction -
Alphavil
commented
I think it is a musthave to say block all traffic from a country excluding maybe a port or Email-Adresses
-
Klaus Müller
commented
the same here!!!
-
BarryG
commented
I also need this before we can use GeoIP blocking, and need to be able to add overrides; e.g. block China except for 1.2.3.0/24, etc.
-
Network Administrator
commented
Agreed, please block a Country, but allow rules to be set to allow SMTP from specific IP addresses if needed. What would be great is to have the Block Country options show up as a single "Wall" rule, then you can move the rule on the list. Having all the states and provinces show up would be a bit much, but if we could control where on the list the Country Blocking is applied, everyone could insert the rules needed for service.
-
Carsten Koster commented
Yes, Upgrade the Option Country Blocking with Services. So that you're able to block a Country but allow e.G. SMTP for this country.
-
Norman
commented
country blocking for indbound would be nice ! NOT outbound.
-
PBehmer
commented
Nice! I just suggested this on the RoadShow.
-
flaserra
commented
you are right Stefan, I asked this in the original feature request... but for the moment no news about. I think that is needed an exception for web sites. We also receive attacks from China, but we need to surf in chinese web sites. As far as I know country blocking stops also web surfing.
At least, could be sufficient to block incoming traffic and not outgoing.