Cloudflare Cloudflare Announced New Firewall Rules Feature

eva2000 · Oct 4, 2018

Cloudflare has announced a new Firewall Rules feature which allows you finer grain control somewhat similar to Cloudflare Page Rules, just for the Cloudflare Firewall instead. Cloudflare Firewall Rules documentation Before getting started - Cloudflare Firewall Rules

Threat landscapes change every second. As attackers evolve, becoming more dynamic and devious, vulnerabilities materialize faster than engineers can patch their applications. Part of Cloudflare’s mission is to keep you and your applications safe. Today, Cloudflare is launching a new feature, giving customers what they have been requesting - fine-grained control over their incoming requests.

Cloudflare already offers a number of powerful firewall tools such as IP rules, CIDR rules, ASN rules, country rules, HTTP user-agent blocking, Zone Lockdown (for these URIs only allow traffic from those IPs), and our comprehensive managed rules within our WAF (Web Application Firewall). But sometimes, you need to combine the power of these to fully mitigate an attack, and to express a block rule that breaks the boundaries of the existing tools, to be able to “block traffic to this URI when the request comes from that IP and the user-agent matches one of these”.
Click to expand...

Firewall Rules
Cloudflare’s new capability, Firewall Rules, provides customers the ability to control requests, in a flexible and intuitive way, inspired by the widely known Wireshark® language. Configuration of rules can be done through not only our Dashboard and API, but also through Terraform (link here).

The Firewall Rules engine can be thought of as 2 components:

Matching: define a filter that runs globally and precisely matches your traffic

Action: declare the action Cloudflare should apply when the filter is matched

Simply put, when the filter matches, apply the action.
Click to expand...

Examples

eva2000 · Oct 4, 2018

Cloudflare Firewall Known Issues and FAQ Known Issues and FAQ - Cloudflare Firewall Rules

Known Issues
Events log doesn’t specify which rule was triggered
The Firewall Events log in the Cloudflare dashboard does not show which specific rule was triggered.

If you look at a Cloudflare Filters entry in the log and click Details, you can see a list of Rule(s) Triggered.

Cloudflare Firewall Rules team plans to improve the Events log in the near future.

See Is there a log showing which rules have triggered?
Click to expand...

Frequently Asked Questions (FAQ)

How many rules can I have on my site?

Can I purchase additional active rules?

Is there a log showing which rules have triggered?

Why isn’t my pattern matching working?

How can I use the Threat Score effectively?

Which bots or crawlers are detected in Firewall Rules?

Log in / Register

Forums

Learn about Centmin Mod LEMP Stack today

Cloudflare Cloudflare Announced New Firewall Rules Feature

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Learn about Centmin Mod LEMP Stack today

Cloudflare Cloudflare Announced New Firewall Rules Feature

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.