Security Rules not working?

What is the name of the domain?

rareparfum.nl

What is the issue you’re encountering

People from blocked countries can access the website anyway

What steps have you taken to resolve the issue?

Disabled and enabled the rule

What feature, service or problem is this related to?

I don’t know

What are the steps to reproduce the issue?

Create a custom rule with this content, choose action “block”, and put it active:
ip.src.country in {“IN” “CN” “PK” “NP” “AF” “UA”}
or
ip.src.continent in {“AF” “AN” “OC” “SA” “T1”}

You are using Shopify so make sure any DNS records pointing to Shopify, including the apex domain, are a proxied CNAME pointing to shops.myshopify.com and not any other A/AAAA/CNAME records.

https://cf.sjr.dev/tools/check?5abe3d1f65cf47e1ad274c591c3df15e#dns

Yes, they are all proxied. I can see in the statistics that there were 3 connections blocked, but on Shopify I see that more than 100 others were not.

Not just proxied, Is the DNS record for rareparfum.nl a CNAME pointing to shops.myshopify.com? Can you show a screenshot of the DNS records.

these are the relevant records, and there is another proxied CNAME from www.rareparfum.nl to shops.myshopify.com

As I said, change the apex record to be a CNAME to shops.myshopify.com, the same as www

thank you very much it worked!