Getting started

1. Switch it on

1. Open Settings → Modules and find Access Restrictions.
2. Click Enable (or Install on the Browse tab).

While the module is off, no rule is applied — switching it off is the quickest way to undo a mistake.

2. Add your first rule

1. Open Settings → System → Access Restrictions.
2. Click Add Rule.
3. Choose the Rule Type (for example IP Block).
4. Fill in the value:
   • IP rules: one address like 203.0.113.42, or a range like 203.0.113.0/24.
   • Country rules: the two-letter country code, like IN for India or CN for China.
5. Write a Reason (required), for example "Fake COD orders, Oct 2026".
6. Optional: set Expires At for a temporary block. Leave it empty for a permanent rule.
7. Click Create Rule.

The rule takes effect within a few minutes.

3. Test it

Use the Test Access box on the same page: type an IP address and a country code and click Test. It tells you whether that visitor would be allowed or denied — without affecting real shoppers.

Who can manage rules

Staff need the access-management (or settings) permission on their user group to see this page.