I'm trying to only allow certain countries, but some things are getting blocked that shouldn't be. For example, today I was trying to do an Apple iCloud password reset, and even though I was allowing the US, Canada, and most of western Europe, it still wouldn't work until I removed the rule. Is there a way, in the logging, to detect what or where the block occurred? I did a visual traceroute, and it didn't seem to route through any non-allowed countries. In the syslog server, what search would I set up to know when a blocking rule was enforced?
... View more
