Allow Known Bots Mean Block Unknown Bots?

Security
#1

Hi
I use this rule for my Cloudflare
(cf.client.bot) Allow

Is this mean allow known bots and block Unknown Bots?
Thanks

#2

No, this only refers to known and verified bots by Cloudflare.
https://developers.cloudflare.com/firewall/known-issues-and-faq#how-does-firewall-rules-handle-traffic-from-known-bots

1 Like
#3

Thanks
I studied about this.

How about this.

Block
(not cf.client.bot)

This time we block bots that if they are not known bots by the Cloudflare. This is the best option i think

#4

That rule on its own would block everything except Verified Bots. This is probably not what you want, as it would block regular users using a browser etc…

The (not cf.client.bot) expression is generally used to not block verified bots that would otherwise be picked up by another expression, such as:
(ip.geoip.asnum in {7224 15169}) and not cf.client.bot)

2 Likes
#5

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.