Skip to content

Commit f87a1d5

Browse files
pedrosousaelithrar
authored andcommitted
[WAF] Clarify country values in IP Access rules (#16880)
1 parent 81bb7df commit f87a1d5

File tree

1 file changed

+9
-14
lines changed

1 file changed

+9
-14
lines changed

src/content/docs/waf/tools/ip-access-rules/parameters.mdx

Lines changed: 9 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,6 @@ sidebar:
66
head:
77
- tag: title
88
content: IP Access rule parameters
9-
109
---
1110

1211
An IP Access rule will apply a certain action to incoming traffic based on the visitor's IP address, IP range, country, or Autonomous System Number (ASN).
@@ -20,8 +19,6 @@ An IP Access rule will apply a certain action to incoming traffic based on the v
2019

2120
## IP range
2221

23-
24-
2522
| Type | Example value | Start of range | End of range | Number of addresses |
2623
| ---------------- | ---------------- | -------------- | ---------------------------------------- | -------------------------------------: |
2724
| IPv4 `/24` range | `192.0.2.0/24` | `192.0.2.0` | `192.0.2.255` | 256 |
@@ -30,27 +27,25 @@ An IP Access rule will apply a certain action to incoming traffic based on the v
3027
| IPv6 `/48` range | `2001:db8::/48` | `2001:db8::` | `2001:db8:0000:ffff:ffff:ffff:ffff:ffff` | 1,208,925,819,614,629,174,706,176 |
3128
| IPv6 `/32` range | `2001:db8::/32` | `2001:db8::` | `2001:db8:ffff:ffff:ffff:ffff:ffff:ffff` | 79,228,162,514,264,337,593,543,950,336 |
3229

33-
34-
3530
## Country
3631

37-
You can specify a country by name or two-letter [ISO-3166-1 alpha-2 codes](https://www.iso.org/iso-3166-country-codes.html). For example:
32+
Specify a country using two-letter [ISO-3166-1 alpha-2 codes](https://www.iso.org/iso-3166-country-codes.html). Additionally, the Cloudflare dashboard accepts country names. For example:
3833

39-
* `US`
40-
* `germany`
41-
* `CN`
34+
- `US`
35+
- `CN`
36+
- `germany` (dashboard only)
4237

4338
Cloudflare uses the following special country alpha-2 codes that are not part of the ISO:
4439

45-
* `T1`: [Tor exit nodes](/network/onion-routing/) (country name: `Tor`)
46-
* `XX`: Unknown/reserved
40+
- `T1`: [Tor exit nodes](/network/onion-routing/) (country name: `Tor`)
41+
- `XX`: Unknown/reserved
4742

4843
:::note[Notes about country blocking]
4944

45+
- Block by country is only available on Enterprise plans.
46+
- IP addresses globally allowed by Cloudflare will override an IP Access rule country block, but they will not override a country block via [WAF custom rules](/waf/custom-rules/).
5047

51-
* Block by country is only available on Enterprise plans.
52-
* IP addresses globally allowed by Cloudflare will override an IP Access rule country block, but they will not override a country block via [WAF custom rules](/waf/custom-rules/).
53-
:::
48+
:::
5449

5550
## Autonomous System Number (ASN)
5651

0 commit comments

Comments
 (0)