Network Security: Exceptions for Country Blocking
I think country blocking should have exception rules tied to it, where profiles could be created and exceptions could be made to bypass it.
For example, if you had a virtual machine you wanted to allow all traffic too, and countries being blocked, you could create an exception rule like anything else currently.
An exception to a country block rule would be a nice feature to add.I currently install alot of sonic walls and setup country block rules but sometimes I have to open up a single ip or a small group of ip's in a country that I have blocked due to a vender request or a site admin request.Also There are some U.S. companys that have there servers for certain apps in countries I have blocked and need to be allowed access to.
This feature has been released as part of UTM 9.1. Enjoy!
Also make sure auto exceptions are added for the features astaro uses in the cloud. I have seen astaros unable to update or check external resources because they use cloud services in different countries which were blocked in country blocking.
Bob Alfson commented
Also, allow exceptions for specific IPs for those with customers in blocked countries.
I think could be important to have the ability to limit country blocking to a group of external IP addresses only
I posted in the forum over this request. pfsense has a mod that will do a lot with their Country Block mod. I would love to see all the same ability in Asatro's Country Block.
other users have requested the same feature, I suggest you to search for opened ideas and vote them
jon, I think this is a duplicate request