Geoblocking
Geoblocking restricts email based on a sender's geographic location, which is identified by the sending server's IP address.
In Email Protection, geoblocking is based on rules and exemptions. You create a geoblocking rule to restrict email from a geographic location (country) and then exemptions can be added to exclude mail from the geoblocking rules. Email can be excluded based on:
- IP (the IPv4 address that an email originates from).
- Domain (the domain an email originates from).
- Email (the email address that the email is sent from).
An MSP admin can enable or disable geoblocking at a global level (default: disabled). Once enabled, geoblocking can be managed at the customer and domain levels. Each level can apply its own geoblocking rules, with rules being inherited from a higher level by default. If applied, a lower level rule supersedes a higher level rule.
Note: If disabling geoblocking, all geoblocking rules must be deleted to ensure geoblocking is turned off.
Example: If Country_Example is blocked by the MSP admin, all customers and domains inherit this rule and block email from Country_Example. However, if Customer A wants to allow email from Country_Example, the Customer A admin can create a rule that will supersede the MSP level rule.
Email Protection uses the ISO 3166 Alpha-2 standard of two digit country codes for geoblocking. See https://www.iso.org/obp/ui/#search/code/ (reference data in the Alpha-2 column).
Go to 'Filtering' > 'Geoblocking' to enable and manage geoblocking.