zedandredal/mh_cloudflare-firewall

A look into protecting your website from DDoS & Hacking Attacks with only CloudFlare Free Plan.

Cloudflare-Firewall

A look into protecting your website from DDoS & Hacking Attacks with only CloudFlare Free Plan.

Firewall Rules:

Rule Name	File Name	Action	What For
General	rules.ssl	Manually Add	Peformance, User Experience, DDOS Protection, Crawlers
Common Countries	common-country.rules	Block	Only Allow Country's Who Wont Pass Much Malicous Traffic.
Bad ASN List	bad-asn.rules	Block	Bad ASN List Of Most Known Proxyscraping Sites.
Threat Score	threatscore.rules	Block	Block Bad Threats Flagged By Cloudflare
Request Method	request-method.rules	Block	Block POST & HEAD Request's Only Allow GET Request's Unless Needed.
Block Bots	blockbots.rules	Block	Block Bots that won't be in your firewall manager.
Block Bad Bots	badbots.rules	Block	Block bad bots.
Wordpress Security	wordpresssecurity.rules	Captcha	People that is not from the united states will do a captcha.

Examples:

Update Bad ASN List:

To update the bad-asn.rules, Go to bad asn list. This list may be 4 years old, But some still works and it is a huge list. There may be some other huge list, Just do your own research.

Firewall rules for cloudflare by znixbtw

Rules

• Allow rules
• Block rules
• Challenge Captcha rules
• Challenge JS rules

Resources:

• NexusGuard.com Thread Report 2018
• CloudFlare DDoS Trends 2021.