WAF doesn't work?

[user1149]

I have WAF rules to block all countries except for a few. The rules were working for a few minutes, I tested by connecting to a blocked country via VPN, and then out of no where they just stopped working.

Now all countries are blocked.

The rules are if a country is not equal to the list of allowed countries, block them.

[albert]

Please see this topic:

I'm getting unexpected JS challenges after setting up my origin rule

Your firewall rule is challenging traffic when: a) Country is not US; or b) Country is not CA Since you are using the “or” operator and a request can’t come from both US and CA, this rule will challenge all requests. The rule should instead look like (not ip.geoip.country in {"US" "CA"}). This will challenge requests when the country is not US or CA.

[user1149]

This worked perfect. Thank you so much!