Block all countries except US,CA ?

[chadreitsma]

Hey guys,
I'm trying to block all access to the server except from US and Canada, but it's not working.

My confiig is:
CC_ALLOW: US,CA
LF_IPSET: on
FASTSTART: off

Server is: CENTOS 7.7 kvm

I can still access domains using proxysite.com (EU), it should be blocking it.

Appreciate your help!

Cheers,
C.

[chadreitsma]

RESOLVED:
I forgot to remove the ports from TCP_IN

My working config is:
TCP_IN: <empty>
CC_ALLOW: US,CA
LF_IPSET: On
FASTSTART: Off

-- It would be helpful if you also included the same instructions from CC_ALLOW_PORTS_TCP: "All listed ports should be removed from TCP_IN/UDP_IN to block access from elsewhere."