Cloudflare Docs

Cloudflare Docs

Overview
About
Fields and expressions
Actions
Order and priority
Rules Lists
API Shield™
Manage rules in the dashboard
Create, edit, and delete rules
Edit rule expressions
Preview rules
Use Rules Lists
Manage lists
Manage list items (IP addresses)
Use lists in expressions
Create a mTLS rule
Configure Schema Validation
Manage rules via the APIs
Firewall Rules API
JSON object
Endpoints
POST example
GET examples
PUT examples
DELETE examples
Cloudflare Filters API
What is a filter?
JSON object
Endpoints
POST example
GET examples
PUT examples
DELETE examples
Expression validation
Rules Lists API
JSON object
Endpoints
Call sequence
Common use cases
Block Microsoft Exchange Autodiscover requests
Block requests based on IP reputation
Challenge bad bots
Exempt partners from Hotlink Protection
Require a specific cookie
Require a valid client certificate
Require a valid HMAC token
Require specific HTTP headers
Require specific HTTP ports
Site administration—Require known IP addresses
Stop R-U-Dead-Yet? (R.U.D.Y.) attacks
Update firewall rules for customers or partners
Firewall Rules language
Fields
Operators and grouping symbols
Values
Functions
Frequently asked questions

Common use cases

The following common use cases illustrate how to secure web traffic to your sites and applications with Firewall Rules: