In Firewall->Tools I created a Zone Lockdown rule for accessing one of my subdomains only by VPN, so I put only one IP address allowed to access.
But I still can access this URL with any IP, it’s a bug or I miss some configuration?
Thanks in advance!
Is this URL a subdomain protected/proxied by Cloudflare?
ie., if the zone lockdown affects
internal.example.com, when you go to the DNS tab for your domain, does the
internal subdomain have an orange cloud next to it and say “Proxied”?
I just tested on a dev subdomain using Tor. I didn’t know the IPv6 address, so it blocked me. I then added that address to Zone Lockdown and it let me through.