How to restrict access to site by url only, not by IP

Website, Application, Performance Security
1

some users bypass cloudflare by editing their host file and adding site IP
is there a way to block access that are not by url

4

There are several options available, choose the ones that best fits your needs.

2 Likes
5

I can not install cloudflared because my operation system is not supported
I tried the second method “HTTP Basic Authentication” but it didn’t work at all

6

You could require Authenticated Origin Pulls or use your firewall to block HTTP and HTTPS connections from all but Cloudflare IPs. You could even do both.

2 Likes
7

epic.network has the most correct answer, but you should also get a new IP address for your origin server so your users don’t know it. When Cloudflare proxies the traffic, users will be unable to find your server’s new IP address.

1 Like
8

thanks but i have fixed myself by adding a 000-default-deny.conf to the vhost configs, it blocked host file hacks very effectively

1 Like
9

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.