How can we improve Kerio Control?

Block Country IP blocks

Block entire country CIDR ranges. I recently did a trial of the Sophos UTM 9 software appliance and this was a feature it had that allowed the admin to tick off countries by name and flag that would be completely blocked which is something i'd love to see in kerio control. Our Firewall frequently gets attacked by Russia and China. Seeing as we do no business with either of these countries we block their entire IP range. An option to select one or more countries to block would be a great feature.

255 votes
Sign in Sign in with GFI
Signed in as (Sign out)
You have left! (?) (thinking…)
Corey Frankard shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →


Sign in Sign in with GFI
Signed in as (Sign out)
  • Peet McKinney commented  ·   ·  Flag as inappropriate

    @Heather Paunet, without the ability to apply these to traffic rules, the feature is pretty much useless when hosting services that need to be available universally (SMTP) and services that need to be limited. Please, Please, Please, Please apply GeoIP to traffic rules!

  • Sean commented  ·   ·  Flag as inappropriate

    Geoip blocking is applied globally at the moment, it would be great to have the geoip ability in the traffic rules for more fine grained control.

  • Igor Velijević commented  ·   ·  Flag as inappropriate

    just to clarify; this is already implemented in current Bet so I'm pleeding You o "expand" the option to traffic rules, not only general blocking

  • Igor Velijević commented  ·   ·  Flag as inappropriate

    Please implement it on Traffic rules also!
    That way we can control and fine tune geo ip blocking across the services

  • Sergey commented  ·   ·  Flag as inappropriate

    Due to the fact that you think I have before the server Kerio to put a filter on the linux which prevents the connection from other countries while I'm using ipsec + iptables and strangely enough it works.
    Blocking by country is present in all modern systems, and you think and invent something, to add to the system using a database of IP addresses from that hinders to create the ability to upload the database and edit them on your own, most likely the financial background of these actions probably need to come up with that squeeze of the user to make money on it in abundance...

  • John Janes commented  ·   ·  Flag as inappropriate

    This would be a great (and very marketable) feature for the Kerio Control firewall.

  • Николай commented  ·   ·  Flag as inappropriate

    Our Kerio Control only works in Russia and only with Russian companies but come attack from other countries, would like to produce a lock. Because now the Group of IP addresses to block consists of more than 5000 records.

Feedback and Knowledge Base