I’m sorry if I am duplicating but I cannot find a post for this problem listed.
I have created some rules to protect my website following this guide: Cloudflare-Firewall-Rules-for-Securing-WordPress
(http.request.uri.path contains “/wp-login.php”) or (http.request.uri.path contains “/xmlrpc.php”)
Using my mobile phone (wifi switched off) and an incognito browser I go to https://example.com/wp-login.php > Login page loads asking for my credentials.
What I expected:
To see the Cloudflare block page