Geo ip blocking but allow an ip address in the country

Grandstream Networking
1

I have a GCC6011 that I set up Geo-IP filtering and am blocking multiple countries. There is a website / IP address range in one of the countries that we need to have access to, but would still like to block all the other IP addresses from the country. I created an IP4 Address group, added the IP address range and have tried everything I can think of to allow the IP range (Inbound-outbound filter rules, etc.) but can’t get it to work, as soon as remove the block on the country it works and the IP address that shows up in the security log when it is blocked is in the range that I have tried everything I can think of to allow. Is it not possible when using the Geo-IP filtering to allow some ip addresses from the country being blocked or any idea what I am doing wrong or what I need to do to get it to work?

Any help would be greatly appreciated.

2

Well I figured out my issue. I should have been using “allow” to allow the countries that I wanted and use the custom geo-ip address section to add addresses from countries that I didn’t allow on the main page. For some stupid reason I was thinking the custom geo-ip page was for exclusions.

1 Like