Block http requests under waf rule set

Website, Application, Performance
1

What is the name of the domain?

empoclues.com

What is the error message?

0%

What is the issue you’re encountering

Can anyone tell me which value works best for the WAF rule to block http request for a specific country traffic.

What steps have you taken to resolve the issue?

i currently use value as “http://” but i couldn’t accomplish. i implemented : (http.request.uri.path contains “"http://"”)

2

Would block anyone just typing your URL address in any Web browser. Have you got the HTTP to HTTPS redirection enabled as well? :thinking: What’s the concern here or why you’d want to block HTTP?

If DNS record is proxied, you could achieve this by writing directly to an Expression builder where only port 443 is enabled, while requests to all the other compatible and supported with Cloudflare proxy :orange: would be presented with the default Cloudflare Block page:

(http.host contains "example.com" and not cf.edge.server_port in {443})

Make sure to replace the example.com with your own true domain name. Above Custom WAF rule would match even sub-domains such as www.example.com.

Helpful article:

Supported and compatible ports on a proxied :orange: DNS record:

3

This topic was automatically closed after 15 days. New replies are no longer allowed.