How to block bad User Agents
I noticed some user agents like python-requests contacting my site, and I wanna make sure only legit browsers can contact it, how do I do that?
2 Replies
either through the waf or a UA blocking rule
https://dash.cloudflare.com/?to=/:account/:zone/security/waf/tools
or
https://dash.cloudflare.com/?to=/:account/:zone/security/waf/custom-rules
note that even regular browsers allow for useragent manipulation though... i wouldn't solely rely on something as volatile as UA to determine if a request is legitimate or not
thank you