Can you talk a bit more about who you are trying to ‘allow’ and who you would like to ‘block’?
Firewall Rules is very flexible and you can achieve this in a number of ways including using other features such as Cloudflare for Teams or Workers. It really depends on what specifically you’re trying to do - most of it will be achievable on any plan level.
If you have control of the video URL - e.g. you can serve the video from a subdomain that is powered via Cloudflare, you can protect it. You could use something like token authentication to protect the URLs:
Outside of this, if you wanted to use Stream (Cloudflare’s native product for video delivery), you can also do this more simply as a first-class feature of the product:
Simon could you explain to me more about how this would work?
For example, if a user opens the html code and copies the url link in the valid period of the token and pastes it into his browser, will he have access to the file?