Firewall rule DMZ - Internet

Question

Hello Everyone, 
 
 I'm trying to create a firewall rule to allow traffic from my DMZ zone to Internet. My question is: Can I block the IPs (when going to internet) that are considered dangerous or ip addresses from countries like china and russia??? 
 
 I wan't to permit the traffic to the internet but without the possibility to access to any dangerous IP address. 
 
 BR,

Amodin · Answer

Have you considered using the Country Blocking aspect of UTM? 
 Network Protection > Firewall > Country Blocking tab. It blocks all incoming/outgoing traffic for that country you specify, or even continent. 
 
 If you are finding your internal computer(s) accessing specific IPs that you want blocked, you can also add a blackhole static route. 
 Interfaces & Routing > Static Route 
 You can add IPs to a group, name it something like 'Blackhole' and add those IPs to that group. Then create a static route, select Blackhole Route then add that Blackhole group. It basically send that traffic to 'nowhere'.

Firewall rule DMZ -> Internet

Top Replies