mzm
This is my test result
When I joined the rule directly, it was not protected.
I found that the nginx configuration has a rule that takes precedence over the protection rule., I tried to delete it and then I found it is work.
So please check if there are other locations that are more prioritized than the protection rules you set.