Allow access to Cloudflare's WAF and then configure IP access rules

[lisa4]

My website is hosted on Flywheel and I need to allow access to Cloudflare’s WAF and then configure IP access rules.

The instructions are:

Allowing access to Cloudflare’s WAF

If you are using Cloudflare’s WAF, you can allow access by adding a rule via one of the following methods:

By header name:

any(http.request.headers.names[*] == "autoupdater")

By URI:

any(http.request.uri.args["autoupdater"][*] == "api")

or

any(http.request.uri.args.names[*] == "autoupdater_nonce")

and

Configuring IP Access Rules for Cloudflare

To create an IP Access Rule, follow these steps:

1. Log in to your Cloudflare account.
2. Select your domain.
3. Click the Firewall app.
4. Click on the Tools tab.
5. Under IP Access Rules, enter the following details:
6. Enter the Value as an IP, IP range, or two-letter country code.
7. Select an Action.
8. Select whether the rule applies to This website or All websites in the account.
9. (Optional) add a Note (i.e. Payment Gateway).
10. Click Add.

35.186.183.60
35.221.41.251
35.236.216.128
35.245.159.253
35.245.210.234
35.245.251.214
35.245.50.252

I’m sure it’s not that hard but I can’t figure it out at all.

[Cyb3r-Jak3]

@lisa4

any(http.request.headers.names[*] == “autoupdater”)

This can be created here
Make sure to switch to expression editor

@lisa4

To create an IP Access Rule, follow these steps:

This is done here

[lisa4]

@lisa4

(http.request.headers.names[*] == “autoupdater”)

I’m still really confused.

I’m on the page that says: Security WAF (Web Application Firewall). Do I enter details in Firewall rules? Rate limiting rules, managed rules etc?

But then what?

Let’s say the answer is Firewall rules. I click on create firewall but then what?

What do I put in field?
What do I put in operator?
What do I put in value?

etc etc. There doesn’t seem to be any instructions on what information I have to put where.

[fritex]

@lisa4

instructions

Kindly, I’d suggest you to follow the steps from here:

• Create, edit, and delete rules · Cloudflare Firewall Rules docs

The mentioned expression builder, let’s you copy-paste the suggested from flywheel:

• Edit rule expressions · Cloudflare Firewall Rules docs

Regarding the IP Access Rule, you already have them written in your first post, despite I’d suggest also to check here for the step-by-step instruction:

• Create an IP Access rule · Cloudflare Web Application Firewall (WAF) docs