Block requests with none user agent

Hello
How can I block requests that doesn’t have any user agent ?

Respectively, if you are on a paid plan, there is also a WAF rule -> Blocking Empty User Agent String

2 Likes

Im on paid plan but tons of requests hit my server with none user agent

Well, you need to enable the rule or alternatively create above’s firewall rule.

1 Like

Also note that you should firewall your server to only accept requests from Cloudflare owned IPs:

I have few issues with blocking blank user agent. Sometime facebook owned ip check content using blank user agent. Should We block it if fb does come to check with blank user agent?