Configure Access Blocking

Overview

SecurEcommerce lets you control store access through multiple blocking methods. This guide covers setting up your first blocking rules.

Before You Start

Consider:

• Where do you ship? Block countries you don’t serve
• Fraud patterns: Are attacks coming from specific regions?
• VPN policy: Do you want to block anonymized traffic?
• Known bad actors: Any specific IPs to block?

Step 1: Access Blocking Settings

1. Open SecurEcommerce in your Shopify admin
2. Click Blocking in the sidebar
3. You’ll see options for different blocking types

Step 2: Configure Country Blocking

To block entire countries:

1. Click Country Blocking
2. Choose your approach:
   • Blocklist: Block specific countries, allow others
   • Allowlist: Allow specific countries, block others
3. Select countries to block/allow
4. Click Save

Tip: Start with blocklist mode, adding countries as needed.

Step 3: Set Up VPN/Proxy Blocking

To block anonymized traffic:

1. Click VPN/Proxy Blocking
2. Toggle Enable VPN Detection
3. Choose your action:
   • Block completely
   • Show warning message
   • Allow but flag
4. Click Save

Tip: Start with “Show warning” to see impact before blocking.

Step 4: Configure TOR Blocking

TOR traffic is higher risk than VPNs:

1. Click TOR Blocking
2. Toggle Block TOR Exit Nodes
3. TOR traffic will be blocked automatically
4. Click Save

Recommendation: Most stores should block TOR.

Step 5: Add IP Blocks (Optional)

To block specific IPs:

1. Click IP Blocking
2. Click Add IP
3. Enter the IP address or CIDR range
4. Optionally add a note explaining why
5. Click Save

Use this for known bad actors you’ve identified.

Step 6: Customize Block Messages

Make your block messages helpful:

1. Go to Block Message Settings
2. Write a clear, professional message:

Example:

“Access to our store is restricted from your location. If you believe this is an error, please contact support@yourstore.com”

3. Optionally configure redirect URL
4. Click Save

Testing Your Configuration

After setup, verify blocks are working:

1. Country blocks: Use a VPN to appear in a blocked country
2. VPN blocks: Connect via VPN and check response
3. IP blocks: Check from blocked IP if possible

Monitoring Blocked Traffic

Track your blocks:

1. Go to Analytics in SecurEcommerce
2. View Blocked Visitors report
3. See breakdown by block type
4. Identify patterns

Adjusting Over Time

Blocking is iterative:

• Review regularly: Check if blocks are appropriate
• Monitor feedback: Are legitimate customers blocked?
• Add new blocks: Respond to emerging threats
• Remove old blocks: Clean up unnecessary rules

Best Practices

1. Start conservative - Add blocks gradually
2. Document reasons - Know why each rule exists
3. Monitor impact - Watch for unintended blocks
4. Clear messaging - Help blocked users understand
5. Regular review - Adjust as patterns change

Common Configurations

Ship to US/Canada Only

• Enable country allowlist
• Allow: United States, Canada
• Block all others

Fraud Prevention Focus

• Block high-fraud countries
• Enable VPN blocking
• Enable TOR blocking

Maximum Access

• Minimal country blocks
• VPN: Warn but allow
• Block only specific IPs

Troubleshooting

Legitimate customers blocked?

• Check country/region accuracy
• Review VPN blocking settings
• Provide customer service contact

Blocks not working?

• Verify rules are saved
• Check for conflicting rules
• Clear browser cache when testing

Too many false positives?

• Loosen VPN settings
• Narrow country blocks
• Switch from blocklist to allowlist