how to set up zero trust policies
 I’m looking for videos how to set up zero trust  and its policies and what IP address is I’m supposed to use any feedback or help would be great. I’m a newbie all I’m trying to do is set up my DNS.
26 Replies
Did you mean to attach images?
You don't need to worry about Zero Trust if you're just setting up Cloudflare/basic DNS Stuff. What are you trying to do?
I have the free account I’ll take a picture and show you what I’m trying to do. I’m trying to set up my DNS other options for my router and for the policies in the rules.
It’s been nice if they left a video on how to set this stuff up that destinations IP is that supposed to be my IP from my router for my static IP
I know my DNS numbers
I’m just trying to set up the firewall
Thank you by the way
I’m gonna take a couple more pictures. I’m sorry I should’ve put some pictures on.
One part I don’t know if I should allow or block I don’t get it
I'm just trying to understand your end goal. That looks like a Network policy, you're trying to create a policy which blocks you from connecting to specific IPs in a specific country?
I’m trying to protect my Xbox DNS, my routers DNS
I’m tired of getting ddos on Xbox
This isn't going to help you do that, at all. If you can use a VPN (some routers support using one), you could hide your IP that way
I got a VPN it helps not to kick my whole network off-line, but I can’t play a decent game of call of duty
I have ASUS rig
Rog
then you should probably find a different one that works.
Sorry, can't help much here.
The only thing Network Policies affect is traffic that is sent via devices using WARP, Cloudflare's VPN. And there's no magical way that you could configure it to Block DDoS. WARP may just do that anyway just by being protected by Cloudflare, but you aren't going to be able to configure that on your Xbox itself, or on your router (as it only supports the 1.1.1.1/WARP app)
So what’s for
Standard DNS, which you can configure with DNS Policies to make it so you can't resolve specific domains/etc
That’s what I’m trying to learn how to work out
DNS has to do with how your device resolves example.com into an IP address, like 1.1.1.2. That's where it stops though. It's not going to stop you from being DDoS attacked if the other person has your IP
I want to block the IP
DNS has nothing to do with that
I’m trying to block from all that coming into my router
Botnet is ran with ddos
I’m trying to block all that stuff that you see in that list from touching my router
No, I’ll give you a glimpse inside my router
All DNS does is resolve human-readable names (example.com) into machine-usable IP addresses (1.1.1.1) to send Requests to. Specifically, using Zero Trust's DNS options, you can make it so your devices cannot resolve domains of specific categories.
It has nothing to do with incoming traffic, or the other person's DNS. Cloudflare cannot block anything going into your router/any incoming traffic,
This is for the DHCP server
I understand some of this can be confusing, to try to put it into simple terms: DNS is not concerned with incoming traffic, its responsilbilites are different. Cloudflare Zero Trust unfortunely has no solution for your issue with getting DDoSed on Xbox. A "solution" that would probably work is setting up a VPN on your router. Not all routers support this, I would google "<your router> vpn setup", and then pick a compatiable reputable VPN that works, and try setting that up. You can try googling as well. Sorry, we are unable to help more then that.
Thank you