topic Re: Block Countries in General Topics

Block Countries

handiansudianto — Mon, 03 Apr 2023 01:45:33 GMT

Hello,

If i have 2 rule like :

1st rule : source : country_A, dst : any, action : drop

2nd rule : source : LAN, dst : any, action : accept

With 2 kind of rule, will our internal rule will be block if our user access website located in country_A?

Re: Block Countries

G_W_Albrecht — Mon, 03 Apr 2023 08:15:50 GMT

Should block the answering package from country_A, but not the first one from user to website located in country_A.

Re: Block Countries

handiansudianto — Mon, 03 Apr 2023 08:20:15 GMT

so when a user access website A located in country_A and because country_A only respond the traffic, so the user can access the website A. But if some host in country_A try to initiate the traffic to our internal resource, so the traffic will be blocked. Am i right?

Re: Block Countries

G_W_Albrecht — Mon, 03 Apr 2023 09:00:50 GMT

Better verify this in LAB !

Re: Block Countries

the_rock — Mon, 03 Apr 2023 12:40:13 GMT

Yea, that sounds about right. All you need to remember is this...like with pretty much any firewall vendor in the world, policy is "measured" top to bottom, left to right, so based one xample you gave, INBOUND traffic from country_A would be blocked no matter what, as that rule comes first.

Andy