Block traffic from specific countries

This example custom rule blocks requests based on country code using the ip.src.country field.

• Expression: (ip.src.country in {"KP" "SY"})
• Action: Block

• Use case: Block traffic by geographical location
• Use case: Allow traffic from specific countries only