How Do I Allow Requests from Only IP Addresses in a Specified Geographical Region?
If you allow only IP addresses in a region to access the protected domain name, for example, only IP addresses from Ireland can access the protected domain name, take the following steps:
![](https://support.huaweicloud.com/eu/waf_faq/public_sys-resources/note_3.0-en-us.png)
Geolocation access control rules have higher priority than built-in WAF rules. If you configure a geolocation access control rule to allow IP addresses from a certain location, WAF then forwards traffic from those IP addresses without performing basic web protection checks.
- Add a geolocation access control rule: Select Ireland for Geolocation and select Allow for Protective Action.
Figure 1 Selecting Allow for Protective Action
- Configure a precise protection rule to block all requests.
Figure 2 Blocking all access requests
Others FAQs
- In Which Situations Will the WAF Policies Fail?
- Can I Export or Back Up the WAF Configuration?
- How Do I Allow Requests from Only IP Addresses in a Specified Geographical Region?
- What Working Modes and Protection Mechanisms Does WAF Have?
- What Types of Protection Rules Does WAF Support?
- Which of the WAF Protection Rules Support the Log-Only Protective Action?
- How Do I Allow Only Specified IP Addresses to Access Protected Websites?
- Which Protection Rules Are Included in the System-Generated Policy?
- Why Does the Page Fail to Be Refreshed After WTP Is Enabled?
- What Are the Differences Between Blacklist/Whitelist Rules and Precise Protection Rules on Blocking Access Requests from Specified IP Addresses?
- What Do I Do If a Scanner, such as AppScan, Detects that the Cookie Is Missing Secure or HttpOnly?
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.
more