Add GEO blocking option in Email security rules - Black/White List

Przemek
Przemek Posts: 28  Freshman Member
First Comment Friend Collector Fifth Anniversary
edited July 2 in Security Ideas

I wish I have in Black/White List an option for GEOGRAPHY blocking. And block all emails sent from blocked countries.

1
Up Down
1 votes

Active · Last Updated

Comments

  • mMontana
    mMontana Posts: 1,389  Guru Member
    50 Answers 1000 Comments Friend Collector Fifth Anniversary

    You can.

    Create a group composed from the countries you want to block. Let's call that "Email_Block".
    Then configure incoming communications on port 25, 465, 587 to being blocked from the group.

  • Przemek
    Przemek Posts: 28  Freshman Member
    First Comment Friend Collector Fifth Anniversary
    https://community.zyxel.com/en/discussion/comment/49704#Comment_49704

    It looks like blocking GEO Group from accessing my network ports.

    Will it block emails sent to external hosting and downloaded to my network from there?

    I was thinking about Rule creating here:

    email-block.png

  • nielsscheldeman
    nielsscheldeman Posts: 51  Ally Member
    First Comment Friend Collector Second Anniversary

    Do you have your own mailserver or are you working with something like Office 365? This could only work if you use your own mailserver.

  • Przemek
    Przemek Posts: 28  Freshman Member
    First Comment Friend Collector Fifth Anniversary
    https://community.zyxel.com/en/discussion/comment/54004#Comment_54004

    I have my own mail server.

    If I have an IP option in rules GEO option should not be something impossible to add here.

  • nielsscheldeman
    nielsscheldeman Posts: 51  Ally Member
    First Comment Friend Collector Second Anniversary

    You have to block these ports then in your Policy Control. Now you have a policy From "WAN" to "LAN1", IPv4 Source "Any", IPv4 Destination "mailserver", Service "25, 465, 587".

    First create objects → Address, Type Geography and select the countries you wish to allow (you can also work reverse and block only countries, but then you need to create an extra rule with higher priority to block these first). Put them in an address group, let's say GEOALLOW.

    Now in case you only want to allow some countries, change your Policy Control rule. Change IPv4 Source "Any" to this object "GEOALLOW"

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）