Hi,
Thank you for the detailed report. I've identified the issue.
The Problem:
In the current version, country blocking (geo-blocking) is processed within the VPN/Proxy detection flow. This means:
- If VPN Detection is disabled or you don't have an API key → the geo-blocking code is never executed
- Country information is obtained from ProxyCheck.io API response
When a visitor comes from China, the system needs to:
- Make an API call to ProxyCheck.io
- Get the country code from the API response
- Check if that country is in your blocked list
Immediate Solution:
Please ensure these settings are enabled:
- VPN/Proxy Detection → Enabled
- VPN API Key → Must have a valid ProxyCheck.io API key
- VPN Check Mode → Set to "Moderate" or "First Visit" (First Visit checks everyone on arrival)
- Blocked Countries → CN (which you already have)
This affects only XenForo traffic. Cloudflare and Google Analytics count visitors before they reach your XenForo site. Even if our add-on blocks them, those analytics services will still count the initial request. To block at the edge level, you need to use Cloudflare's WAF/Firewall rules to block CN traffic.
Thanks,
XENTR