how do i allow only certain ips in zero trust tunneling ?
hi ,
i've setup a tunnel and make sure it worked .
i would like to restrict ips - countries from accessing the tunnel domain.
so not all the world can access it .
i tried to setup a in gateway >firewall section
to allow only certain country , however when i try with a different country via vpn to test it out i still can access my domain and webpage .
to allow only certain country , however when i try with a different country via vpn to test it out i still can access my domain and webpage .

6 Replies
hello thanks for taking the time reading and answering my question
where do i find that ?
i do see on the main page WAF option but its a purchased addon
i found it, its under the domain - website
thank you very much

Those firewall policies and such are for Zero Trust/using gateway and such. You just want the generic firewall under the normal cloudflare dashboard Security -> WAF -> Custom Rules
was done thank you
is this still possible? I see this when trying to reach the same spot in the photos

You need to use zone level WAF, not account level WAF. Select a domain first, then go to WAF.