Mail & Country blocking
If using Country blocking in firewall and you send a mail to a blocked country, allow the server that you send to to do an rdns check etc so the outgoing mail isn't treated as spam.
Also allow mail exceptions to be placed in Country blocking exceptions. The above combination will allow the UTM to send all mail to & receive specific mail from a blocked country.
From the community forum, I recently learned that it is possible to create country blocking exceptions for SMTP. If your exception rule says only "traffic coming from: ALL", it will not work. You need to add your active interface addresses to the list as well. From the post, I was unclear whether to use the interface address or the interface network. Since I was in a hurry, I added both, and now it works. I have not yet raised this behavior with Support. I have been busy and they often declare this sort of thing as a "Feature". So my variation of this feature request is for UTM to behave so that "All" means "All" for SMTP exceptions to Country Blocking. I don't know if this is needed elsewhere or not.