Not blocking countries

Hi @scruffy1 and @11whyohwhy15,

I’m so sorry I couldn’t get back to you sooner.

@11whyohwhy15 wrote:

Wordfence is blocking through its firewall but surely these countries should have been stopped by IGB first…

Regarding to the execution order of WF and IGB, WF always works prior to IGB even if you select “mu-plugins (ip-geo-block-mu.php)” at “Validation timing” in “Validation rule settings” section.

WF configures .user.ini to works before WordPress starts. And IGB runs in the contexts of WordPress. That’s why WF blocked some requests before IGB would block.

@scruffy1 wrote:

I have set up all the country codes and one I am trying to block is RU, yet visitors from RU still get through and so do the bad people too.

I think this would be cause by “UA string and qualification” in “Front-end target settings“. Please try to add *#RU at the top of “UA string and qualification“. It mainly verifies “DNS reverse lookup” to identify a visitor is good bots or not. But it does not always fit your demand.

Please refer to the documentation about “UA string and Qualification” in codex.

I hope this answer may solve your issues.
Thanks.

Thanks for your understanding.