alex103
February 19, 2025, 11:59am
1
What is the name of the domain?
https://the-nac.co.uk
What is the issue you’re encountering
India as a country should be blocked from reaching my site the-nac.co.uk but Wordfence still shows someone from Indian IP 13.200.39.123 trying to access my site and getting passed the firewall. Please can you look at this as there is a clear bug/error here as all other country blocking works.
What is the current SSL/TLS setting?
Full (strict)
fritex
February 19, 2025, 12:02pm
2
Please, may I ask to share a screenshot of your Custom WAF Rule where you’re blocking the India country?
Is it the only WAF rule or you’ve got more of them?
Is it the 1st from above on the list?
alex103:
Wordfence
Make sure to set CF-Connecting-IP in the Settings page:
alex103
February 19, 2025, 12:07pm
3
Hello,
Here is a screenshot showing that I am using a country block custom rule and India is included.
When I check the analytics, the ip coming through to wordfence isn’t being mitigated at all.
I also have another rule setup so that if the IP isn’t from a blocked country, but also isn’t in the UK, then it presents a managed challenge.
Thank you for the information on Wordfence & Cloudflare. I’ve just chnaged it to your recommended setting.
alex103
February 19, 2025, 12:09pm
4
The first rule on my list checks if an IP is coming from a known verified bot or other allowed IP, then skips the rest of the rules.
Then second is country blocking.
Third is managed challenge for any countries that are not blocked and aren’t the UK
Thanks
system
Closed
March 6, 2025, 12:09pm
5
This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.