Blocking Countries

Despite blocking some countries under Protection Options and including a range of ip addresses in the Block list this does not seem to be working.
Running the diagnostics shows those countries as OK and I continue to get forms on the web site completed from addresses in the blocked ip range.
Why would that be?