Scenario ② · WAF action = Block

⛔ You are seeing this page = the Block rule is not active

When configured, this URL (https://oldm.nc-demo.cf/demo/block.html) returns the custom branded 403 block page instead of this content — HTTP 403, body from Custom Errors → the file you uploaded.

Audience demo (repeatable)

  1. WAF → Custom rules: match URI Path contains "/demo/block.html" → action Block.
  2. Open the URL → visitors see the branded 403 page (never this content).
  3. curl from the demo machine: curl -I https://oldm.nc-demo.cf/demo/block.html → HTTP 403.
  4. Disable the rule → the page below returns (this content), proving the origin itself is fine.

← Back