Cloudflare firewall rules

Hm, that would be really nice but I think, the normal requests from normal visitors would be JS Challenged as well, which isn’t a good thing, right?

Either one rule could end up being in a conjuction with the second one - I am afraid how that would either work, if so.

Could be I am wrong about it.

I would rather suggest below:

Known “good” bots are listed on the below link, kindly check which one are they:

To block bad bots, I would suggest creating another Firewall Rule which includes a list of them, something as follows on below posts:

You could also combine multiple things (like bad bots) into a single Firewall Rule, like block all bad bots but at the same time allow good “known” bots from the cf.client.bot list.