How to Enhance WordPress Security with Custom Cloudflare Firewall Rules

In this video, I'll walk you through how to make your WordPress website even more secure and performant using Cloudflare's custom firewall rules. These rules, created by Troy Glancy, help prevent malicious attacks, spammers, and other unwanted access to your site.
We'll cover how to setup all of these rules to allow good bots, block aggressive crawlers, and challenge large providers and VPN users. This is a great way to make your website more secure and keep unnecessary load off of your web server.
Troy Glancy's Blog post with the rules: webagencyhero.com/cloudflare-...
Join this channel to get access to perks:
/ @permaslug
-- More --
Signup for my newsletter: jonathanjernigan.com/newsletter/
Support the channel by becoming a member!

[@markatgraf1x]

I’ve been meaning to implement Troy’s rules since he published them, so this is an awesome walk through thanks!
Wouldn’t it be great if Cloudflare allowed you to add this once, then have it apply to all sites on your account!

[@Permaslug]

I very much wish that was possible lol

[@SadaqatGhafoor]

This is a life saver for my web application...thanks

[@visualmodo]

Truly good work!!!

[@AnilAgrawal]

Awesome video. Thank you! LIKE'd and subscribed.

[@huntrolly2190]

Thank you.

[@kenbaker7412]

Great resource! One question... in the Security > Bots section, there is a "Bot Fight Mode" . Will this conflict with any of the WAF custom rules that were shown in the video?

[@Permaslug]

Good question! Might be worth reaching out to Troy about that

[@grizfan93]

Thanks! very helpful video. I use Cloudways with Vulture and DO servers, would the last rule cause any issues or block Cloudways support from accessing for support purposes? Thanks!

[@Permaslug]

Not as far as I’m aware!

[@johnnycakez2750]

Jonathan, do you use any wp specific security plugins or just cloudflare/server rules?

[@LevyCarneiro]

Following.

[@Permaslug]

I don’t, I just use my hosts security and a trusted suite of plugins across all my sites

[@dhetherington]

I have 20 websites, is there an easy way to add these rules to multiple sites?

[@peterwise]

There's no way to do instantly copy all rules between sites in the web interface. You could write a custom script that uses the API for this. But if you want to do it only online you need to setup each site individually. You can save a lot of time by going into "expression" mode and copy and pasting that instead of recreating the long details of each rule in the dropdown/and/or GUI interface.