Restricting who can reach sensitive paths.
THE PROBLEM
Login and admin pages are attacked continuously. Every attempt consumes resources even when it fails.
WHAT CLOUDFLARE OFFERS
Firewall rules challenging or blocking requests to those paths Rate limiting on the login path Cloudflare Access, which requires authentication before the request reaches your site at all
A PRACTICAL FIREWALL RULE
Challenge every request to the admin or login path except from your own address or country.
That stops the overwhelming majority of automated attempts.
CLOUDFLARE ACCESS
Places an identity check in front of a path. Nobody reaches the application without authenticating first.
Effective and more configuration than most small sites need.
THE SIMPLER ALTERNATIVE
cPanel Directory Privacy on the admin directory. A server-level password prompt, so bots never reach your application.
That works regardless of Cloudflare and costs nothing.
COMBINING THEM
Directory Privacy at our end, a Cloudflare rule at the edge. The rule saves the request ever arriving.
WHAT TO AVOID
Locking yourself out. Test from another network before relying on a restrictive rule.
