Blocking specific traffic.
WHAT YOU CAN MATCH ON
Country IP address or range User agent Request path Request method ASN, identifying the network the request comes from
WHAT YOU CAN DO
Block Challenge, presenting a test Allow, bypassing other checks Log only
USEFUL RULES FOR MOST SITES
Challenge or block requests to login paths from countries you do not serve Block known bad user agents Rate limit requests to the login path Allow your own address, bypassing challenges
THE LOGIN PATH RULE
The most valuable single rule. Login pages are attacked continuously, and each attempt consumes your resources even when it fails.
Challenging requests to that path stops most automated attacks before they reach us.
BE CAREFUL WITH COUNTRY BLOCKS
Blocking whole countries blocks legitimate visitors, search engine crawlers hosted there, and yourself when travelling.
Use challenge rather than block where the traffic is merely suspicious.
TESTING
After creating a rule, check that your own access still works and that the site loads normally.
