cloudflare防火墙常用规则

cloudflare

合法机器人验证

主要是对谷歌、Bing、雅虎、Yandex、搜狗、百度、360、神马、今日头条等合法搜索引擎的蜘蛛进行抓起网站内容。

(cf.client.bot)

非法访问验证

高风险IP、不是合法机器人验证、禁止访问高风险URL地址

(cf.threat_score ge 2 and not cf.client.bot) or (http.request.full_uri contains "xmlrpc.php") or (http.request.full_uri contains "wp-config.php") or (http.request.full_uri contains ".bak") or (http.request.full_uri contains "install.php") or (not http.user_agent contains "Mozilla/5.0")