No new certificate (Let's Encrypt) for my mail server

[hvacguy (Shaun HVAC)]

Yes. Either way.
You can make multiple location groups with different access.
So as a example
Ipfire location group access all countries except XD.
User location group access Germany
XD could be blocked by location block

Found the reference

@pmueller

if you understood your question right, you can do so today by turning the location filter off and limit the acceptable source(s) for e. g. port-forwarding rules to certain countries. The sole purpose of the location filter is to reduce noise in the logs, it’s security importance is rather low in my personal view.