一些常用的Cloudflare防火墙规则

Cloudflare防火墙规则可以用于保护您的网站免受恶意攻击和不良流量的影响

拦截具有已知威胁的流量cloudflare规则

(http.request.uri.path contains "eval(") or (http.request.uri.path contains "php://input") or (http.request.uri.path contains "base64_") or (http.request.uri.path contains "localhost") or (http.request.uri.path contains "127.0.0.1") or (http.request.uri.path contains "wp-admin/") or (http.request.uri.path contains "wp-login.php") or (http.request.uri.path contains "xmlrpc.php") or (http.request.uri.path contains "wp-content")

(ip.geoip.country in {"CN" "RU"}) or (http.request.uri.path contains ".cn" or http.request.uri.path contains ".ru")

这条规则将限制来自中国和俄罗斯的IP地址的访问，同时也会拦截包含.cn或.ru域名的请求。

防止DDoS攻击

(http.request.uri.query contains "booter" or http.request.uri.query contains "stresser" or http.request.uri.query contains "ddos") or (http.request.uri.path contains ".onion" or http.request.uri.path contains ".i2p") or (http.request.headers.referer contains "booter" or http.request.headers.referer contains "stresser" or http.request.headers.referer contains "ddos") or (tcp.srcport eq 80 and tcp.ack eq 0)

这条规则将防止DDoS攻击，包括检测查询字符串中的关键字（如booter、stresser和ddos）、检测.onion和.i2p域名以及检测HTTP引用信息中的关键字。

防止SQL注入和XSS攻击

(http.request.uri.query contains "script>" or http.request.uri.query contains "<script") or (http.request.uri.query contains "alert(") or (http.request.uri.query contains "select * from") or (http.request.uri.query contains "union select") or (http.request.uri.query contains "drop table") or (http.request.uri.query contains "delete from") or (http.request.uri.query contains "trxn=1") or (http.request.uri.query contains "declare[@")

这条规则将拦截包含某些SQL注入和XSS攻击的特征的请求，如script>、<script、alert()、select * from、union select、drop table、delete from、trxn=1和declare[@。

需要注意的是，Cloudflare防火墙规则只是一种辅助的安全措施，不能完全保证您的网站免受攻击。因此，您还需要采取其他措施，如更新您的软件、定期备份数据、配置SSL证书等，以确保您的网站安全。

本文来自投稿，不代表站三界导航立场，如若转载，请注明出处：https://www.zhansanjie.com/article/details/43674.html