Block by Country (GeoIP)

REQUEST: Please provide the ability to Block by Country, using the GeoIP details of the resulting IP.

Since the destination_country is listed in the 'Download logs', it should be possible to block the resolved Country. Blocking by Country will further improve security by blocking access to IP's in countries that may be hosting malicious / threat-based content, etc. or simply countries we do not want to visit.

timestamp,domain,query_type,dnssec,protocol,client_ip,status,reasons,destination_country,root_domain,device_id,device_name,device_model,device_local_ip,matched_name,client_name

NOTE: For those also interested in this, please understand that this can be a challenge to provide reliably, but it's still worth asking for even if they are unable to provide it immediately. GeoIP accuracy is not 100% accurate and as a result can cause trouble when trying to access a known good site when the resulting GeoIP detail comes back to an invalid Country. Further... it takes time for the related GeoIP details to be corrected.

Example: yesterday you were able to reach www[.]outlook[.]com which the IP's resolved to the US, but today it is blocked as the IP's now resolve to NL or some other Country which may be in your blocked Country list. 

The temporary workaround would be to add the related Domain to the Allowlist to bypass the related Country block.