Global_Deny can be overridden -- Easy Question?

[jumpclan]

We are using a CSF Global_Deny list with IPs that are blocked. This works great at filtering BOTs and other HTTP pests.

However the Global_Deny list appears to be blocking incoming SMTP traffic as well.

Is it possible to override the Global_Deny setting on a per user basis and/or for SMTP traffic?

Thanks in advance...

[ForumAdmin]

No, you cannot whitelist incoming connections in iptables based on a local user account. You can whitelist based on incoming IP address and to a specific port using the advanced port filtering (see readme.txt).

[jumpclan]

Thank you for the confirmation.
Very helpful and much appreciated.
I guess that our only alternative is to the move our SMTP mail to another server.
Anybody else have a separate SMTP server for incoming mail (because of strict IP filtering needed for HTTP traffic)?