Country Blocking Not Working

What is the name of the domain?

https://the-nac.co.uk

What is the issue you’re encountering

India as a country should be blocked from reaching my site the-nac.co.uk but Wordfence still shows someone from Indian IP 13.200.39.123 trying to access my site and getting passed the firewall. Please can you look at this as there is a clear bug/error here as all other country blocking works.

What is the current SSL/TLS setting?

Full (strict)

Please, may I ask to share a screenshot of your Custom WAF Rule where you’re blocking the India country? :thinking:

Is it the only WAF rule or you’ve got more of them?
Is it the 1st from above on the list?

Make sure to set CF-Connecting-IP in the Settings page:

Hello,

Here is a screenshot showing that I am using a country block custom rule and India is included.

When I check the analytics, the ip coming through to wordfence isn’t being mitigated at all.

I also have another rule setup so that if the IP isn’t from a blocked country, but also isn’t in the UK, then it presents a managed challenge.

Thank you for the information on Wordfence & Cloudflare. I’ve just chnaged it to your recommended setting.



The first rule on my list checks if an IP is coming from a known verified bot or other allowed IP, then skips the rest of the rules.

Then second is country blocking.

Third is managed challenge for any countries that are not blocked and aren’t the UK

Thanks

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.