Location Blocking with an exception

[hvacguy (Shaun HVAC)]

Read this.
Location block is first
So creating location groups is the easiest way.
And not use location block

Location Block filter strictly before FW input

I just want to discuss if it’s necessary to have the Location Block filter right in front of the firewall input fixed. I think this limits its usage a little bit. E.g. if an IPFire instance is installed right in front of a server and the server is handling mail, it’s important, that the server can get connections from all over the world. So Location Block must be turned off. If another service on this server needs the location block, locations groups need to be created to get a similar functio…