{"id":2018,"date":"2026-09-05T11:10:33","date_gmt":"2026-09-05T03:10:33","guid":{"rendered":"https:\/\/maxaeo.cn\/blog\/cloudflare-custom-firewall-rules\/"},"modified":"2026-09-05T11:10:33","modified_gmt":"2026-09-05T03:10:33","slug":"cloudflare-custom-firewall-rules","status":"publish","type":"post","link":"https:\/\/maxaeo.cn\/blog\/cloudflare-custom-firewall-rules\/","title":{"rendered":"cloudflare \u81ea\u5b9a\u4e49\u9632\u706b\u5899\u89c4\u5219\u914d\u7f6e\uff1a\u653e\u884c\u3001\u62e6\u622a\u4e0e\u6392\u67e5\u6a21\u677f"},"content":{"rendered":"

\u4f5c\u8005\uff1amaxaeo.cn\uff5c\u53d1\u5e03\u65e5\u671f\uff1a2026-08-26\uff5c\u66f4\u65b0\u65e5\u671f\uff1a2026-08-26<\/em><\/p>\n

cloudflare \u81ea\u5b9a\u4e49\u9632\u706b\u5899\u89c4\u5219\u662f Cloudflare WAF \u4e2d\u6309\u8bf7\u6c42\u6761\u4ef6\u6267\u884c\u62e6\u622a\u3001\u8d28\u8be2\u6216\u8df3\u8fc7\u5b89\u5168\u68c0\u67e5\u7684\u89c4\u5219\u3002\u5b83\u6700\u9002\u5408\u89e3\u51b3\u4e09\u7c7b\u95ee\u9898\uff1a\u4fdd\u62a4\u540e\u53f0\u5165\u53e3\u3001\u653e\u884c\u53ef\u4fe1\u670d\u52a1\u3001\u51cf\u5c11 AI \u722c\u866b\u548c\u76d1\u63a7\u5de5\u5177\u88ab\u8bef\u62e6\u3002<\/p>\n

\"cloudflare<\/figure>\n

\u4ec0\u4e48\u662f Cloudflare \u81ea\u5b9a\u4e49\u9632\u706b\u5899\u89c4\u5219\uff1f<\/h2>\n

Cloudflare \u81ea\u5b9a\u4e49\u9632\u706b\u5899\u89c4\u5219\u6307\u5728 WAF \u4e2d\u7528\u8868\u8fbe\u5f0f\u5339\u914d\u8bf7\u6c42\uff0c\u518d\u6267\u884c Block\u3001Managed Challenge\u3001Skip \u7b49\u52a8\u4f5c\u7684\u5b89\u5168\u89c4\u5219\u3002\u6839\u636e Cloudflare WAF Custom rules \u6587\u6863<\/a>\uff0c\u89c4\u5219\u7531\u8868\u8fbe\u5f0f\u548c\u52a8\u4f5c\u7ec4\u6210\uff0c\u5e76\u6309\u987a\u5e8f\u6267\u884c\u3002<\/p>\n

\u5b83\u548c\u65e7\u7248 Firewall Rules \u7684\u6838\u5fc3\u533a\u522b\u662f\uff1a\u73b0\u5728\u89c4\u5219\u88ab\u7eb3\u5165 Cloudflare Ruleset Engine\uff0c\u914d\u7f6e\u5165\u53e3\u4e5f\u66f4\u504f\u5411 \u201cSecurity rules \/ WAF custom rules\u201d\u3002\u5b9e\u9645\u4f7f\u7528\u65f6\uff0c\u4e0d\u8981\u53ea\u628a\u5b83\u7406\u89e3\u6210\u201c\u5c01 IP \u5de5\u5177\u201d\uff0c\u800c\u5e94\u628a\u5b83\u5f53\u6210\u4e00\u6761\u8bf7\u6c42\u5206\u6d41\u94fe\u8def<\/strong>\uff1a\u5148\u8bc6\u522b\u53ef\u4fe1\u6d41\u91cf\uff0c\u518d\u5904\u7406\u9ad8\u98ce\u9669\u8def\u5f84\uff0c\u6700\u540e\u5bf9\u6a21\u7cca\u8bf7\u6c42\u505a\u6311\u6218\u6216\u9650\u901f\u3002<\/p>\n

\u4ec0\u4e48\u65f6\u5019\u8be5\u7528\u81ea\u5b9a\u4e49\u89c4\u5219\uff0c\u800c\u4e0d\u662f IP Access Rules\uff1f<\/h2>\n

\u5982\u679c\u53ea\u662f\u4e34\u65f6\u5c01\u7981\u5355\u4e2a IP\uff0cIP Access Rules \u591f\u7528\uff1b\u5982\u679c\u8981\u7ec4\u5408\u8def\u5f84\u3001Host\u3001UA\u3001\u56fd\u5bb6\u3001ASN\u3001Header\uff0c\u5c31\u5e94\u4f7f\u7528\u81ea\u5b9a\u4e49\u89c4\u5219\u3002Cloudflare \u4e5f\u5728 IP Access rules \u6587\u6863<\/a> \u4e2d\u5efa\u8bae\u66f4\u591a IP \u6216\u5730\u57df\u963b\u65ad\u573a\u666f\u6539\u7528 custom rules\u3002<\/p>\n

\u5173\u952e\u539f\u56e0\u662f\u201c\u653e\u884c\u201d\u7684\u526f\u4f5c\u7528\u4e0d\u540c\u3002IP Access Rules \u4e2d\u5141\u8bb8 IP \u6216 ASN \u53ef\u80fd\u7ed5\u8fc7\u5df2\u914d\u7f6e\u7684\u81ea\u5b9a\u4e49\u89c4\u5219\u3001\u901f\u7387\u9650\u5236\u548c\u6258\u7ba1\u89c4\u5219\uff1b\u800c\u81ea\u5b9a\u4e49\u89c4\u5219\u7684 Skip \u53ef\u4ee5\u66f4\u7ec6\u5730\u6307\u5b9a\u8df3\u8fc7\u54ea\u4e9b\u5b89\u5168\u529f\u80fd\u3002\u5bf9 SaaS \u5b98\u7f51\u3001API\u3001\u76d1\u63a7\u63a2\u9488\u548c AI \u6293\u53d6\u6765\u8bf4\uff0c\u6700\u5c0f\u653e\u884c<\/strong>\u901a\u5e38\u6bd4\u5168\u5c40\u767d\u540d\u5355\u66f4\u5b89\u5168\u3002<\/p>\n

\u521b\u5efa\u89c4\u5219\u7684\u6700\u77ed\u8def\u5f84<\/h2>\n

\u521b\u5efa\u89c4\u5219\u7684\u6807\u51c6\u8def\u5f84\u662f\uff1a\u8fdb\u5165 Cloudflare \u63a7\u5236\u53f0\uff0c\u6253\u5f00 Security rules\uff0c\u9009\u62e9 Create rule > Custom rules\uff0c\u586b\u5199\u540d\u79f0\u3001\u5339\u914d\u6761\u4ef6\u548c\u52a8\u4f5c\u540e\u90e8\u7f72\u3002Cloudflare \u5728 Create a custom rule in the dashboard<\/a> \u4e2d\u5217\u51fa\u7684\u6d41\u7a0b\u4e5f\u57fa\u672c\u5982\u6b64\u3002<\/p>\n

\u5efa\u8bae\u7528\u4ee5\u4e0b\u547d\u540d\u65b9\u5f0f\uff0c\u65b9\u4fbf\u56de\u6eda\u548c\u5ba1\u8ba1\uff1a<\/p>\n

    \n
  1. allow_monitoring_api_20260826<\/code>\uff1a\u653e\u884c\u76d1\u63a7\u6216 API\u3002<\/li>\n
  2. challenge_login_abnormal_20260826<\/code>\uff1a\u767b\u5f55\u9875\u5f02\u5e38\u8bbf\u95ee\u8d28\u8be2\u3002<\/li>\n
  3. block_sensitive_paths_20260826<\/code>\uff1a\u654f\u611f\u8def\u5f84\u963b\u65ad\u3002<\/li>\n
  4. skip_ai_crawler_docs_20260826<\/code>\uff1a\u7279\u5b9a AI \u722c\u866b\u8bbf\u95ee\u6587\u6863\u9875\u65f6\u8df3\u8fc7\u90e8\u5206\u68c0\u67e5\u3002<\/li>\n<\/ol>\n

    \u89c4\u5219\u4e0a\u7ebf\u524d\u5148\u4fdd\u5b58\u4e3a Draft\uff0c\u786e\u8ba4\u8868\u8fbe\u5f0f\u6ca1\u6709\u8bef\u4f24\u540e\u518d Deploy\u3002\u5bf9\u9ad8\u6d41\u91cf\u7ad9\u70b9\uff0c\u5148\u7528 Managed Challenge \u6216 Log \u89c2\u5bdf\uff0c\u6bd4\u76f4\u63a5 Block \u66f4\u7a33\u3002<\/p>\n

    \u5e38\u7528\u8868\u8fbe\u5f0f\u6a21\u677f\uff1a\u653e\u884c\u3001\u62e6\u622a\u4e0e\u6311\u6218<\/h2>\n

    Cloudflare \u89c4\u5219\u8868\u8fbe\u5f0f\u7684\u6838\u5fc3\u662f\u201c\u5b57\u6bb5 + \u64cd\u4f5c\u7b26 + \u503c\u201d\u3002\u4e0b\u9762\u6a21\u677f\u53ef\u6309\u4e1a\u52a1\u66ff\u6362\u57df\u540d\u3001\u8def\u5f84\u3001IP \u5217\u8868\u6216 User-Agent\u3002<\/p>\n\n\n\n\n\n\n\n\n\n\n
    \u573a\u666f<\/th>\n\u63a8\u8350\u52a8\u4f5c<\/th>\n\u8868\u8fbe\u5f0f\u793a\u4f8b<\/th>\n\u9002\u7528\u8bf4\u660e<\/th>\n<\/tr>\n<\/thead>\n
    \u53ea\u5141\u8bb8\u516c\u53f8 IP \u8bbf\u95ee\u540e\u53f0<\/td>\nBlock<\/td>\n(http.request.uri.path starts_with "\/admin" and not ip.src in $office_ips)<\/code><\/td>\n$office_ips<\/code> \u662f\u81ea\u5b9a\u4e49 IP \u5217\u8868<\/td>\n<\/tr>\n
    \u963b\u65ad\u654f\u611f\u6587\u4ef6\u63a2\u6d4b<\/td>\nBlock<\/td>\n(http.request.uri.path in {"\/.env" "\/wp-config.php" "\/.git\/config"})<\/code><\/td>\n\u9002\u5408\u591a\u6570 Web \u7ad9\u70b9<\/td>\n<\/tr>\n
    \u767b\u5f55\u9875\u5f02\u5e38\u8bbf\u95ee\u6311\u6218<\/td>\nManaged Challenge<\/td>\n(http.request.uri.path eq "\/login" and ip.geoip.country ne "CN")<\/code><\/td>\n\u4e0d\u9002\u5408\u6709\u5927\u91cf\u6d77\u5916\u7528\u6237\u7684\u7ad9\u70b9<\/td>\n<\/tr>\n
    \u653e\u884c\u76d1\u63a7\u63a2\u9488<\/td>\nSkip<\/td>\n(http.user_agent contains "YourMonitor" and ip.src in $monitor_ips)<\/code><\/td>\n\u5efa\u8bae\u540c\u65f6\u6821\u9a8c IP \u4e0e UA<\/td>\n<\/tr>\n
    API \u4ec5\u5141\u8bb8\u6307\u5b9a Host<\/td>\nBlock<\/td>\n(http.host eq "api.example.com" and not ip.src in $api_partners)<\/code><\/td>\n\u9002\u5408\u5408\u4f5c\u65b9\u56de\u8c03<\/td>\n<\/tr>\n
    AI \u722c\u866b\u8bbf\u95ee\u8d44\u6599\u9875\u653e\u884c<\/td>\nSkip<\/td>\n(http.request.uri.path starts_with "\/docs" and http.user_agent contains "bot")<\/code><\/td>\n\u9700\u7ed3\u5408\u65e5\u5fd7\u786e\u8ba4\u771f\u5b9e UA<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    Cloudflare \u7684 Custom lists \u6587\u6863<\/a> \u8bf4\u660e\uff0cIP \u5217\u8868\u53ef\u5305\u542b\u5355\u4e2a IPv4\u3001IPv6 \u6216 CIDR \u6bb5\uff0c\u5e76\u53ef\u5728\u8868\u8fbe\u5f0f\u4e2d\u7528 ip.src in $list_name<\/code> \u5f15\u7528\u3002\u53ea\u8981 IP \u6570\u91cf\u8d85\u8fc7 5 \u4e2a\uff0c\u5c31\u4e0d\u5efa\u8bae\u628a\u5730\u5740\u76f4\u63a5\u5199\u6b7b\u5728\u89c4\u5219\u91cc\u3002<\/p>\n

    \u4e00\u5957\u66f4\u7a33\u7684\u201c\u5148\u653e\u884c\u3001\u518d\u62e6\u622a\u3001\u540e\u6311\u6218\u201d\u987a\u5e8f<\/h2>\n

    \u89c4\u5219\u987a\u5e8f\u4f1a\u5f71\u54cd\u7ed3\u679c\u3002Cloudflare \u6587\u6863\u660e\u786e\u8bf4\u660e\u81ea\u5b9a\u4e49\u89c4\u5219\u6309\u987a\u5e8f\u8bc4\u4f30\uff0c\u90e8\u5206\u52a8\u4f5c\u5982 Block \u4f1a\u505c\u6b62\u540e\u7eed\u89c4\u5219\u6267\u884c\u3002\u56e0\u6b64\uff0c\u5b89\u5168\u89c4\u5219\u4e0d\u8981\u6309\u201c\u60f3\u5230\u4ec0\u4e48\u5199\u4ec0\u4e48\u201d\u7684\u987a\u5e8f\u5806\u53e0\u3002<\/p>\n

    \u66f4\u7a33\u7684\u987a\u5e8f\u662f\uff1a<\/p>\n

      \n
    1. \u53ef\u4fe1\u670d\u52a1\u6700\u5c0f\u653e\u884c<\/strong>\uff1a\u76d1\u63a7\u3001\u652f\u4ed8\u56de\u8c03\u3001\u4f01\u4e1a VPN\u3001\u5df2\u9a8c\u8bc1 API \u5408\u4f5c\u65b9\u3002<\/li>\n
    2. \u660e\u786e\u6076\u610f\u8bf7\u6c42\u963b\u65ad<\/strong>\uff1a\u654f\u611f\u6587\u4ef6\u3001\u65e0\u4e1a\u52a1\u610f\u4e49\u8def\u5f84\u3001\u5df2\u786e\u8ba4\u653b\u51fb\u6765\u6e90\u3002<\/li>\n
    3. \u9ad8\u98ce\u9669\u5165\u53e3\u6311\u6218<\/strong>\uff1a\u767b\u5f55\u9875\u3001\u6ce8\u518c\u9875\u3001\u641c\u7d22\u9875\u3001\u8868\u5355\u63d0\u4ea4\u9875\u3002<\/li>\n
    4. \u4f4e\u7f6e\u4fe1\u5ea6\u6d41\u91cf\u89c2\u5bdf<\/strong>\uff1a\u65b0 UA\u3001\u65b0\u56fd\u5bb6\u3001\u65b0 ASN \u5148\u6311\u6218\u6216\u8bb0\u5f55\u3002<\/li>\n
    5. \u590d\u6d4b\u4e0e\u56de\u6eda<\/strong>\uff1a\u89c2\u5bdf Security Events\u3001\u6e90\u7ad9\u65e5\u5fd7\u3001\u4e1a\u52a1\u544a\u8b66\u3002<\/li>\n<\/ol>\n

      \u8fd9\u4e2a\u987a\u5e8f\u7684\u597d\u5904\u662f\uff1a\u53ef\u4fe1\u6d41\u91cf\u4e0d\u4f1a\u88ab\u540e\u7eed\u5bbd\u6cdb\u89c4\u5219\u8bef\u4f24\uff0c\u6076\u610f\u8bf7\u6c42\u4e5f\u4e0d\u4f1a\u8fdb\u5165\u5e94\u7528\u5c42\u6d88\u8017\u8d44\u6e90\u3002<\/p>\n

      AI \u722c\u866b\u4e0e\u76d1\u63a7\u5de5\u5177\u4e3a\u4ec0\u4e48\u5bb9\u6613\u88ab\u8bef\u62e6\uff1f<\/h2>\n

      AI \u722c\u866b\u3001\u641c\u7d22\u6293\u53d6\u5668\u548c\u76d1\u63a7\u63a2\u9488\u5e38\u88ab\u8bef\u62e6\uff0c\u662f\u56e0\u4e3a\u5b83\u4eec\u4e0d\u50cf\u666e\u901a\u6d4f\u89c8\u5668\uff1a\u8bbf\u95ee\u9891\u7387\u56fa\u5b9a\u3001Cookie \u5c11\u3001JS \u6267\u884c\u5f31\u3001User-Agent \u53d8\u5316\u5feb\u3002\u82e5\u89c4\u5219\u53ea\u5199\u201c\u975e\u6d4f\u89c8\u5668 UA \u4e00\u5f8b\u62e6\u622a\u201d\uff0c\u5f88\u5bb9\u6613\u8fde\u5408\u6cd5\u6293\u53d6\u4e5f\u6321\u6389\u3002<\/p>\n

      MaxAEO \u5728\u5904\u7406 AI \u641c\u7d22\u53ef\u89c1\u6027\u95ee\u9898\u65f6\uff0c\u7ecf\u5e38\u628a WAF \u6392\u67e5\u653e\u5728 robots.txt \u4e4b\u540e\uff1a\u5148\u786e\u8ba4\u534f\u8bae\u5141\u8bb8\uff0c\u518d\u786e\u8ba4\u8fb9\u7f18\u5c42\u6ca1\u6709 403\u3001Challenge \u6216\u6e90\u7ad9\u62d2\u7edd\u3002\u76f8\u5173\u6392\u67e5\u53ef\u53c2\u8003\u7ad9\u5185\u7684 AI \u722c\u866b\u8bbf\u95ee\u88ab\u62e6\u622a\u6392\u67e5\u6307\u5357<\/a> \u548c WAF \u8bef\u4f24\u673a\u5668\u4eba\u6d41\u91cf\u7684\u6700\u5c0f\u653e\u884c\u7b56\u7565<\/a>\u3002<\/p>\n

      \u5bf9 AI \u6293\u53d6\uff0c\u5efa\u8bae\u4e0d\u8981\u5199\u201c\u6240\u6709 bot \u653e\u884c\u201d\u3002\u66f4\u5b89\u5168\u7684\u505a\u6cd5\u662f\u9650\u5b9a\u4e09\u4ef6\u4e8b\uff1a\u9875\u9762\u8303\u56f4\u3001UA \u7279\u5f81\u3001\u8bbf\u95ee\u9891\u7387<\/strong>\u3002\u4f8b\u5982\u53ea\u8ba9\u6587\u6863\u9875\u3001\u535a\u5ba2\u9875\u3001\u4ea7\u54c1\u4ecb\u7ecd\u9875\u8fdb\u5165 Skip\uff0c\u800c\u767b\u5f55\u9875\u3001\u652f\u4ed8\u9875\u3001\u540e\u53f0\u9875\u7ee7\u7eed\u7531 WAF \u4fdd\u62a4\u3002<\/p>\n

      \"AI<\/figure>\n

      \u539f\u521b\u6392\u67e5\u6846\u67b6\uff1a9 \u683c\u89c4\u5219\u590d\u6838\u8868<\/h2>\n

      \u4e0a\u7ebf cloudflare \u81ea\u5b9a\u4e49\u9632\u706b\u5899\u89c4\u5219\u524d\uff0c\u53ef\u4ee5\u7528\u201c9 \u683c\u590d\u6838\u8868\u201d\u964d\u4f4e\u8bef\u4f24\u7387\u3002\u5b83\u4e0d\u662f Cloudflare \u5b98\u65b9\u5b57\u6bb5\u6e05\u5355\uff0c\u800c\u662f\u4e00\u5957\u5b9e\u64cd\u5ba1\u8ba1\u6846\u67b6\uff0c\u9002\u5408\u5b89\u5168\u3001\u589e\u957f\u548c\u6280\u672f\u56e2\u961f\u4e00\u8d77\u786e\u8ba4\u3002<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n
      \u590d\u6838\u9879<\/th>\n\u8981\u95ee\u7684\u95ee\u9898<\/th>\n\u4e0d\u901a\u8fc7\u65f6\u7684\u98ce\u9669<\/th>\n<\/tr>\n<\/thead>\n
      Host<\/td>\n\u662f\u5426\u53ea\u4f5c\u7528\u4e8e\u76ee\u6807\u5b50\u57df\u540d\uff1f<\/td>\n\u8bef\u4f24\u4e3b\u7ad9\u6216 API<\/td>\n<\/tr>\n
      Path<\/td>\n\u662f\u5426\u9650\u5b9a\u5230\u5fc5\u8981\u8def\u5f84\uff1f<\/td>\n\u5168\u7ad9\u6311\u6218\u3001\u6536\u5f55\u4e0b\u964d<\/td>\n<\/tr>\n
      Method<\/td>\nGET\u3001POST \u662f\u5426\u5206\u5f00\u5904\u7406\uff1f<\/td>\n\u8868\u5355\u6216\u56de\u8c03\u5931\u8d25<\/td>\n<\/tr>\n
      IP<\/td>\n\u662f\u5426\u7528\u5217\u8868\u7ef4\u62a4\uff1f<\/td>\n\u5730\u5740\u53d8\u66f4\u540e\u89c4\u5219\u5931\u6548<\/td>\n<\/tr>\n
      UA<\/td>\n\u662f\u5426\u53ea\u4f5c\u4e3a\u8f85\u52a9\u6761\u4ef6\uff1f<\/td>\nUA \u4f2a\u9020\u5bfc\u81f4\u7ed5\u8fc7<\/td>\n<\/tr>\n
      Country\/ASN<\/td>\n\u662f\u5426\u7b26\u5408\u771f\u5b9e\u7528\u6237\u5206\u5e03\uff1f<\/td>\n\u6d77\u5916\u5ba2\u6237\u65e0\u6cd5\u8bbf\u95ee<\/td>\n<\/tr>\n
      Action<\/td>\nBlock\u3001Challenge\u3001Skip \u662f\u5426\u5408\u9002\uff1f<\/td>\n\u653e\u884c\u8fc7\u5ea6\u6216\u62e6\u622a\u8fc7\u5ea6<\/td>\n<\/tr>\n
      Order<\/td>\n\u662f\u5426\u653e\u5728\u6b63\u786e\u987a\u5e8f\uff1f<\/td>\n\u524d\u7f6e\u89c4\u5219\u622a\u65ad\u540e\u7eed\u89c4\u5219<\/td>\n<\/tr>\n
      Evidence<\/td>\n\u662f\u5426\u80fd\u5728\u65e5\u5fd7\u4e2d\u590d\u73b0\uff1f<\/td>\n\u65e0\u6cd5\u89e3\u91ca\u89c4\u5219\u6548\u679c<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

      \u4e00\u4e2a\u53ef\u6267\u884c\u6807\u51c6\u662f\uff1a\u4efb\u4f55\u89c4\u5219\u4e0a\u7ebf\u524d\uff0c\u81f3\u5c11\u7528\u4e09\u7c7b\u8bf7\u6c42\u6d4b\u8bd5\u2014\u2014\u6b63\u5e38\u6d4f\u89c8\u5668\u3001\u53ef\u4fe1\u673a\u5668\u4eba\u3001\u5f02\u5e38\u63a2\u6d4b\u8def\u5f84\u3002\u53ea\u6709\u4e09\u7c7b\u7ed3\u679c\u90fd\u7b26\u5408\u9884\u671f\uff0c\u624d\u8fdb\u5165\u957f\u671f\u8fd0\u884c\u3002<\/p>\n

      \u89c4\u5219\u793a\u4f8b\uff1aSaaS \u5b98\u7f51\u7684\u6700\u5c0f\u9632\u62a4\u7ec4\u5408<\/h2>\n

      SaaS \u5b98\u7f51\u901a\u5e38\u6709\u5b98\u7f51\u5185\u5bb9\u3001\u767b\u5f55\u5165\u53e3\u3001API\u3001\u6587\u6863\u548c\u535a\u5ba2\u3002\u9632\u706b\u5899\u89c4\u5219\u4e0d\u5e94\u628a\u6240\u6709\u8def\u5f84\u6df7\u5728\u4e00\u8d77\uff0c\u800c\u5e94\u6309\u8d44\u4ea7\u91cd\u8981\u6027\u5206\u5c42\u3002<\/p>\n

      \u89c4\u5219 1\uff1a\u540e\u53f0\u5165\u53e3\u53ea\u5141\u8bb8\u529e\u516c IP<\/strong><\/p>\n

      (http.request.uri.path starts_with "\/admin" and not ip.src in $office_ips)\n<\/code><\/pre>\n
      \u52a8\u4f5c\uff1aBlock\u3002
      \n\u8bf4\u660e\uff1a\u9002\u7528\u4e8e\u56fa\u5b9a\u529e\u516c\u7f51\u7edc\u6216 VPN\u3002\u82e5\u56e2\u961f\u8fdc\u7a0b\u529e\u516c\u591a\uff0c\u5efa\u8bae\u6539\u7528 Cloudflare Access\uff0c\u800c\u4e0d\u662f\u9891\u7e41\u6539 IP\u3002<\/p>\n
      \u89c4\u5219 2\uff1a\u654f\u611f\u8def\u5f84\u76f4\u63a5\u963b\u65ad<\/strong><\/p>\n
      (http.request.uri.path in {"\/.env" "\/.git\/config" "\/wp-config.php" "\/phpinfo.php"})\n<\/code><\/pre>\n
      \u52a8\u4f5c\uff1aBlock\u3002
      \n\u8bf4\u660e\uff1a\u8fd9\u4e9b\u8def\u5f84\u901a\u5e38\u6ca1\u6709\u6b63\u5e38\u4e1a\u52a1\u8bbf\u95ee\u4ef7\u503c\uff0c\u547d\u4e2d\u540e\u53ef\u76f4\u63a5\u62e6\u622a\u3002<\/p>\n
      \u89c4\u5219 3\uff1a\u767b\u5f55\u9875\u5f02\u5e38\u8bbf\u95ee\u8d28\u8be2<\/strong><\/p>\n
      (http.request.uri.path eq "\/login" and not ip.src in $trusted_users)\n<\/code><\/pre>\n
      \u52a8\u4f5c\uff1aManaged Challenge\u3002
      \n\u8bf4\u660e\uff1a\u6bd4\u76f4\u63a5\u5c01\u7981\u66f4\u6e29\u548c\uff0c\u9002\u5408\u4e0d\u786e\u5b9a\u8bbf\u95ee\u8005\u8eab\u4efd\u65f6\u4f7f\u7528\u3002<\/p>\n
      \u89c4\u5219 4\uff1a\u5185\u5bb9\u9875\u5141\u8bb8\u53ef\u4fe1\u6293\u53d6<\/strong><\/p>\n
      ((http.request.uri.path starts_with "\/blog" or http.request.uri.path starts_with "\/docs") and http.user_agent contains "bot")\n<\/code><\/pre>\n
      \u52a8\u4f5c\uff1aSkip \u6307\u5b9a\u5b89\u5168\u68c0\u67e5\uff0c\u800c\u4e0d\u662f\u5168\u5c40 Allow\u3002
      \n\u8bf4\u660e\uff1a\u5982\u679c\u4f60\u6b63\u5728\u505a AI \u641c\u7d22\u6536\u5f55\u4e0e\u5f15\u7528\u4f18\u5316\uff0c\u53ef\u7ed3\u5408 \u5927\u6a21\u578b\u6293\u53d6 403 \u539f\u56e0\u6392\u67e5<\/a> \u505a\u540c\u53e3\u5f84\u590d\u6d4b\u3002<\/p>\n
      \u5982\u4f55\u9a8c\u8bc1\u89c4\u5219\u6709\u6ca1\u6709\u751f\u6548\uff1f<\/h2>\n
      \u9a8c\u8bc1\u89c4\u5219\u751f\u6548\u4e0d\u80fd\u53ea\u770b\u201c\u9875\u9762\u80fd\u4e0d\u80fd\u6253\u5f00\u201d\u3002\u6b63\u786e\u505a\u6cd5\u662f\u540c\u65f6\u770b Cloudflare Security Events\u3001\u6e90\u7ad9\u8bbf\u95ee\u65e5\u5fd7\u3001\u4e1a\u52a1\u76d1\u63a7\u548c\u6293\u53d6\u7ed3\u679c\u3002\u56db\u7c7b\u8bc1\u636e\u4e00\u81f4\uff0c\u624d\u8bf4\u660e\u89c4\u5219\u53ef\u9760\u3002<\/p>\n
      \u5efa\u8bae\u6309\u8fd9\u4e2a\u987a\u5e8f\u590d\u6d4b\uff1a<\/p>\n
        \n
      1. \u7528\u76ee\u6807 IP \u6216 UA \u8bbf\u95ee\u547d\u4e2d\u8def\u5f84\uff0c\u786e\u8ba4\u52a8\u4f5c\u7b26\u5408\u9884\u671f\u3002<\/li>\n
      2. \u5728 Security Events \u4e2d\u7b5b\u9009\u89c4\u5219\u540d\u79f0\uff0c\u786e\u8ba4\u8bf7\u6c42\u88ab\u5bf9\u5e94\u89c4\u5219\u5904\u7406\u3002<\/li>\n
      3. \u67e5\u770b\u6e90\u7ad9\u65e5\u5fd7\uff0c\u786e\u8ba4\u8be5\u5230\u6e90\u7ad9\u7684\u8bf7\u6c42\u786e\u5b9e\u5230\u8fbe\u3002<\/li>\n
      4. \u5bf9 AI \u722c\u866b\u6216\u641c\u7d22\u673a\u5668\u4eba\uff0c\u590d\u67e5\u662f\u5426\u4ecd\u51fa\u73b0 403\u3001JS Challenge\u3001\u8d85\u65f6\u6216\u7a7a\u767d\u54cd\u5e94\u3002<\/li>\n
      5. \u89c4\u5219\u53d8\u66f4 24\u201372 \u5c0f\u65f6\u540e\uff0c\u518d\u6bd4\u8f83\u6293\u53d6\u9891\u6b21\u3001\u5f15\u7528\u6765\u6e90\u548c\u9875\u9762\u6536\u5f55\u53d8\u5316\u3002<\/li>\n<\/ol>\n
        \u5982\u679c\u4f60\u7684\u76ee\u6807\u662f\u63d0\u5347\u54c1\u724c\u5728 AI \u56de\u7b54\u4e2d\u7684\u53ef\u89c1\u5ea6\uff0c\u8fd8\u5e94\u76d1\u6d4b\u201c\u653e\u884c\u540e\u662f\u5426\u771f\u7684\u88ab\u5f15\u7528\u201d\u3002MaxAEO \u652f\u6301\u76d1\u6d4b\u8c46\u5305\u3001DeepSeek\u3001\u817e\u8baf\u5143\u5b9d\u3001\u901a\u4e49\u5343\u95ee\u3001\u6587\u5fc3\u4e00\u8a00\u7b49\u56fd\u4ea7 AI \u4e2d\u54c1\u724c\u7684\u63d0\u53ca\u7387\u3001\u6392\u5e8f\u3001\u60c5\u7eea\u8bc4\u4ef7\u4e0e\u5f15\u7528\u6765\u6e90\uff0c\u53ef\u7528\u4e8e\u89c2\u5bdf WAF \u8c03\u6574\u540e\u7684 AI \u641c\u7d22\u56de\u58f0\uff1b\u66f4\u591a\u65b9\u6cd5\u53ef\u53c2\u8003 AI \u641c\u7d22\u5f15\u64ce\u6293\u53d6\u5931\u8d25\u6392\u67e5\u6307\u5357<\/a>\u3002<\/p>\n
        \"cloudflare<\/figure>\n
        \u5e38\u89c1\u9519\u8bef\uff1a\u770b\u4f3c\u5b89\u5168\uff0c\u5b9e\u9645\u5bb9\u6613\u8bef\u4f24<\/h2>\n
        \u6700\u5e38\u89c1\u7684\u9519\u8bef\u662f\u628a\u201c\u80fd\u6321\u4f4f\u653b\u51fb\u201d\u5f53\u6210\u552f\u4e00\u76ee\u6807\u3002\u5bf9\u5b98\u7f51\u3001\u5185\u5bb9\u7ad9\u548c SaaS \u589e\u957f\u9875\u6765\u8bf4\uff0c\u5b89\u5168\u89c4\u5219\u8fd8\u5fc5\u987b\u517c\u987e\u641c\u7d22\u6293\u53d6\u3001AI \u5f15\u7528\u3001\u76d1\u63a7\u544a\u8b66\u548c\u5ba2\u6237\u8bbf\u95ee\u3002<\/p>\n
        \u907f\u514d\u4ee5\u4e0b\u5199\u6cd5\uff1a<\/p>\n
          \n
        • \u53ea\u6309 User-Agent \u653e\u884c<\/strong>\uff1aUA \u53ef\u4f2a\u9020\uff0c\u5e94\u53e0\u52a0 IP\u3001\u8def\u5f84\u6216\u9891\u7387\u3002<\/li>\n
        • \u5168\u7ad9\u62e6\u622a\u6d77\u5916\u56fd\u5bb6<\/strong>\uff1a\u82e5\u6709\u6d77\u5916\u5ba2\u6237\u3001AI \u5e73\u53f0\u6216\u641c\u7d22\u5f15\u64ce\u8282\u70b9\uff0c\u5bb9\u6613\u8bef\u4f24\u3002<\/li>\n
        • \u628a API \u548c\u5b98\u7f51\u5171\u7528\u4e00\u6761\u89c4\u5219<\/strong>\uff1aAPI \u66f4\u9002\u5408\u6309 Host\u3001\u8def\u5f84\u3001Method\u3001\u5408\u4f5c\u65b9 IP \u62c6\u5206\u3002<\/li>\n
        • \u76f4\u63a5 Allow \u5927\u6bb5 IP<\/strong>\uff1a\u53ef\u80fd\u7ed5\u8fc7\u8fc7\u591a\u5b89\u5168\u68c0\u67e5\uff0c\u4f18\u5148\u8003\u8651 Skip \u7684\u6700\u5c0f\u8303\u56f4\u3002<\/li>\n
        • \u6ca1\u6709\u89c4\u5219\u547d\u540d\u89c4\u8303<\/strong>\uff1a\u6392\u67e5\u65f6\u4e0d\u77e5\u9053\u54ea\u6761\u89c4\u5219\u5bfc\u81f4 403\u3002<\/li>\n<\/ul>\n
          \u5e38\u89c1\u95ee\u9898<\/h2>\n
          Cloudflare \u514d\u8d39\u7248\u80fd\u7528\u81ea\u5b9a\u4e49\u9632\u706b\u5899\u89c4\u5219\u5417\uff1f<\/h3>\n
          \u53ef\u4ee5\u4f7f\u7528 WAF \u81ea\u5b9a\u4e49\u89c4\u5219\uff0c\u4f46\u4e0d\u540c\u5957\u9910\u7684\u53ef\u7528\u6570\u91cf\u3001\u52a8\u4f5c\u548c\u9ad8\u7ea7\u80fd\u529b\u4f1a\u53d8\u5316\u3002\u5b9e\u9645\u9650\u5236\u5e94\u4ee5 Cloudflare \u63a7\u5236\u53f0\u548c\u5b98\u65b9\u5957\u9910\u8bf4\u660e\u4e3a\u51c6\uff1b\u5199\u89c4\u5219\u65f6\u4f18\u5148\u5408\u5e76\u540c\u7c7b\u6761\u4ef6\uff0c\u907f\u514d\u628a\u514d\u8d39\u989d\u5ea6\u6d6a\u8d39\u5728\u91cd\u590d\u89c4\u5219\u4e0a\u3002<\/p>\n
          Allow \u548c Skip \u5e94\u8be5\u9009\u54ea\u4e2a\uff1f<\/h3>\n
          \u80fd\u4e0d\u7528\u5168\u5c40 Allow \u5c31\u4e0d\u8981\u7528\u3002Skip \u66f4\u9002\u5408\u201c\u53ea\u8df3\u8fc7\u67d0\u4e9b\u5b89\u5168\u529f\u80fd\u201d\u7684\u6700\u5c0f\u653e\u884c\u573a\u666f\uff1bAllow \u6216 IP Access Rules \u7684\u653e\u884c\u53ef\u80fd\u5e26\u6765\u66f4\u5927\u7684\u7ed5\u8fc7\u8303\u56f4\uff0c\u5c24\u5176\u4e0d\u9002\u5408\u9ad8\u6743\u9650\u540e\u53f0\u548c API\u3002<\/p>\n
          \u89c4\u5219\u4e0a\u7ebf\u540e\u7f51\u7ad9 403 \u600e\u4e48\u6392\u67e5\uff1f<\/h3>\n
          \u5148\u5728 Cloudflare Security Events \u6309\u65f6\u95f4\u3001\u8def\u5f84\u3001IP \u548c\u89c4\u5219\u540d\u79f0\u8fc7\u6ee4\uff0c\u518d\u5bf9\u7167\u6e90\u7ad9\u65e5\u5fd7\u3002\u5982\u679c Cloudflare \u6709\u4e8b\u4ef6\u800c\u6e90\u7ad9\u65e0\u65e5\u5fd7\uff0c\u8bf4\u660e\u8bf7\u6c42\u5728\u8fb9\u7f18\u5c42\u88ab\u5904\u7406\uff1b\u5982\u679c\u6e90\u7ad9\u6709\u65e5\u5fd7\uff0c\u5219\u7ee7\u7eed\u67e5\u5e94\u7528\u3001\u9632\u706b\u5899\u6216 Nginx \u914d\u7f6e\u3002<\/p>\n
          AI \u722c\u866b\u88ab\u62e6\u622a\u65f6\u8981\u4e0d\u8981\u5168\u90e8\u653e\u884c bot\uff1f<\/h3>\n
          \u4e0d\u5efa\u8bae\u3002\u66f4\u7a33\u59a5\u7684\u65b9\u6cd5\u662f\u53ea\u653e\u884c\u5185\u5bb9\u9875\u3001\u6587\u6863\u9875\u548c\u516c\u5f00\u4ea7\u54c1\u9875\uff0c\u540c\u65f6\u4fdd\u7559\u767b\u5f55\u3001\u540e\u53f0\u3001\u652f\u4ed8\u548c\u8868\u5355\u9875\u4fdd\u62a4\u3002\u653e\u884c\u540e\u5e94\u6301\u7eed\u89c2\u5bdf\u63d0\u53ca\u7387\u3001\u5f15\u7528\u6765\u6e90\u548c\u5f02\u5e38\u6d41\u91cf\u3002<\/p>\n
          \u81ea\u5b9a\u4e49\u89c4\u5219\u80fd\u66ff\u4ee3 robots.txt \u5417\uff1f<\/h3>\n
          \u4e0d\u80fd\u3002robots.txt \u662f\u6293\u53d6\u534f\u8bae\u5c42\u58f0\u660e\uff0cCloudflare WAF \u662f\u8bbf\u95ee\u63a7\u5236\u5c42\u3002\u524d\u8005\u544a\u8bc9\u673a\u5668\u4eba\u54ea\u4e9b\u9875\u9762\u53ef\u6293\uff0c\u540e\u8005\u51b3\u5b9a\u8bf7\u6c42\u662f\u5426\u80fd\u901a\u8fc7\u8fb9\u7f18\u5b89\u5168\u68c0\u67e5\uff1b\u4e24\u8005\u8981\u914d\u5408\u4f7f\u7528\u3002<\/p>\n
          \u7ed3\u8bba\uff1a\u628a\u89c4\u5219\u5f53\u6210\u53ef\u590d\u6d4b\u7684\u6d41\u91cf\u6cbb\u7406\u7cfb\u7edf<\/h2>\n
          cloudflare \u81ea\u5b9a\u4e49\u9632\u706b\u5899\u89c4\u5219\u7684\u4ef7\u503c\u4e0d\u53ea\u662f\u201c\u62e6\u622a\u574f\u6d41\u91cf\u201d\uff0c\u800c\u662f\u8ba9\u4e0d\u540c\u6d41\u91cf\u8d70\u4e0d\u540c\u5b89\u5168\u8def\u5f84\u3002\u540e\u53f0\u8981\u5f3a\u4fdd\u62a4\uff0cAPI \u8981\u51c6\u5165\u63a7\u5236\uff0c\u5185\u5bb9\u9875\u8981\u907f\u514d\u8bef\u62e6\u641c\u7d22\u548c AI \u6293\u53d6\uff0c\u76d1\u63a7\u5de5\u5177\u8981\u6709\u6700\u5c0f\u653e\u884c\u3002<\/p>\n
          \u771f\u6b63\u53ef\u9760\u7684\u914d\u7f6e\u6709\u4e09\u4e2a\u7279\u5f81\uff1a\u8868\u8fbe\u5f0f\u8303\u56f4\u5c0f\u3001\u52a8\u4f5c\u526f\u4f5c\u7528\u6e05\u695a\u3001\u65e5\u5fd7\u80fd\u590d\u73b0\u3002\u6bcf\u6b21\u6539\u89c4\u5219\u90fd\u4fdd\u7559\u57fa\u7ebf\u3001\u53d8\u66f4\u8bb0\u5f55\u548c\u590d\u6d4b\u7ed3\u679c\uff0c\u624d\u80fd\u5728\u5b89\u5168\u3001\u9632\u8bef\u4f24\u548c AI \u53ef\u89c1\u6027\u4e4b\u95f4\u53d6\u5f97\u5e73\u8861\u3002<\/p>\n