Allow access to Cloudflare's WAF and then configure IP access rules

My website is hosted on Flywheel and I need to allow access to Cloudflare’s WAF and then configure IP access rules.

The instructions are:

Allowing access to Cloudflare’s WAF

If you are using Cloudflare’s WAF, you can allow access by adding a rule via one of the following methods:

By header name:

any(http.request.headers.names[*] == "autoupdater")


any(http.request.uri.args["autoupdater"][*] == "api")


any(http.request.uri.args.names[*] == "autoupdater_nonce")


Configuring IP Access Rules for Cloudflare

To create an IP Access Rule, follow these steps:

  1. Log in to your Cloudflare account.
  2. Select your domain.
  3. Click the Firewall app.
  4. Click on the Tools tab.
  5. Under IP Access Rules, enter the following details:
  6. Enter the Value as an IP, IP range, or two-letter country code.
  7. Select an Action.
  8. Select whether the rule applies to This website or All websites in the account.
  9. (Optional) add a Note (i.e. Payment Gateway).
  10. Click Add.

I’m sure it’s not that hard but I can’t figure it out at all.

This can be created here
Make sure to switch to expression editor

This is done here

I’m still really confused.

I’m on the page that says: Security WAF (Web Application Firewall). Do I enter details in Firewall rules? Rate limiting rules, managed rules etc?

But then what?

Let’s say the answer is Firewall rules. I click on create firewall but then what?

What do I put in field?
What do I put in operator?
What do I put in value?

etc etc. There doesn’t seem to be any instructions on what information I have to put where.

Kindly, I’d suggest you to follow the steps from here:

The mentioned expression builder, let’s you copy-paste the suggested from flywheel:

Regarding the IP Access Rule, you already have them written in your first post, despite I’d suggest also to check here for the step-by-step instruction:

1 Like

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.