Meraki

DrewC86

Sorry, the rule in question is to block traffic NOT from the listed countries. Most of our clients have no reason to go to any sites outside of the countries in the rule, so we like to have things as locked down as possible (I have cleaned up after a prior IT person who didn't harden the company's network, and their main file server got infected with ransomware).

DrewC86

Thanks. We are in the US and all traffic appears to be affected. Most of our clients have no reason to go to any sites outside the countries in the rule, so we like to have things as locked down as possible. Looks like that is becoming less and less viable as more software providers and sites set up servers all over the planet.

DrewC86

Thanks for the quick reply. Yeah we already had to do that. We put in another rule only blocking the countries notorious for bad sites/actors (Russia, Brazil, Nigeria, etc) and aren't having an issue, so its probably a random country Cloudflare routes through being blocked somewhere that they haven't figured out yet.

DrewC86

We have an issue where when we enable A layer 7 firewall rule blocking traffic from all but a handful of countries (see image) there is a very long load time for websites, as if DNS resolution is being impacted somehow (we use 1.1.1.1/1.0.0.1). When we remove the firewall rule the issue goes away. We have other client locations with the same rule and CloudFlare DNS. Has anyone else encountered this? Edit: We have an MX75 running MX 18.107.2 firmware. Our other locations have MX64s, could that have something to do with it?

Meraki

Community

About DrewC86

DrewC86

Community Record

Re: Country Blocking causing slow internet/name resolution

Re: Country Blocking causing slow internet/name resolution

Re: Country Blocking causing slow internet/name resolution

Country Blocking causing slow internet/name resolution