Block all traffic, allow certain IPs


#1

Hello,

Is it possible to block all traffic, but allow only certain IPs? As in block 0.0.0.0, but allow xx.xx.xx.xx ?

Thanks!


#2

This is an option which can be configured via API for our paid plans:

https://api.cloudflare.com/#zone-lockdown-properties


#3

Hello cscharff and thanks for the reply!

I will try it out tomorrow. We have a Pro package plan.

Thank you!


#4

We tried zone lockdown rules and they worked great until we discovered that URLs and URL paths are case sensitive and all rules can be easily bypassed by switching case of the letters. This is not listed in any of the official documentation that I looked at. Until this loophole is patched, zone lockdown rules should not be used.


#5

@slerman,

Thanks for your report, this has been fixed and now should work in a case-insensitive manner.