WAF not configured correctly?

[buck]

Hi, i have hosted some servers at my home. For example a Synology NAS.

I want to block all countrys except netherlands, belgium, luxembourg and germany.

So i setted WAF (see screenshot).

But still i can connect to my NAS from other countrys like austria.

I have an A record ‘mydomain com’ that points to my WAN IP.

And a CNAME with name: nas and target: ’mydomain com’. Both are not proxied.

But i can still access ’nas.mydomain com’ from other countrys.

What did i wrong? Or do i not understand WAF correctly?

[Laudian]

@buck

Both are not proxied.

That’s what you did wrong. If the entries are not proxied, WAF cannot work.

[buck]

Cool, thanks! Now it works