Drop Inbound SMTP connections from Specified countries

Using the rule below i see unexpected behavior in the logs. The log excerpt shows three connections. Each of these connections is from a country that is blocked.  The rule seems to block all other protocols from blocked countries except SMTP. It allows a lot of SMTP traffic that it should not. The three entries are from Argentina, Japan, and China. The mouse over is from the email that originated in China.

Added TAGs
[edited by: emmosophos at 11:52 PM (GMT -7) on 11 May 2022]
Parents Reply Children
No Data