Block ip for subdomain

[comer.mhr]

Hi I have a subdomain sub.example.com

I want to restrict access of all IPs to sub and only add IPs manually to the whitelist

Does cloudflare have this feature?
Thanks for the tips
Thanks dear cloudflare!

[sandro]

You can do this with the following firewall rule set to “Block”

(http.host eq "sub.example.com" and not ip.src in {})

[comer.mhr]

Thanks and what should I do if I want to open the IP?

[sandro]

Open? You simply add the desired addresses in the right field, that’s it.

https://developers.cloudflare.com/firewall/cf-firewall-rules/fields-and-expressions has all on that.

[comer.mhr]

How about Is it possible to give an example?

Thank you very much for your response

[sandro]

I provided an example in the first response

(http.host eq "sub.example.com" and not ip.src in {})

The mentioned link goes more into details too.