Cloudflare Docs

Cloudflare Docs

Overview
About
Actions
Order and priority
IP Lists
Manage rules in the dashboard
Create, edit, and delete rules
Edit rule expressions
Preview rules
Use IP Lists

Manage lists
Manage IP List items
Use lists in expressions

Create a mTLS rule
Manage rules via the APIs
Firewall Rules API

JSON object
Endpoints
POST example
GET examples
PUT examples
DELETE examples

Cloudflare Filters API

What is a filter?
JSON object
Endpoints
POST example
GET examples
PUT examples
DELETE examples
Expression validation

Rules Lists API

JSON object
Endpoints

Call sequence
Common use cases
Block Microsoft Exchange Autodiscover requests
Block requests based on IP reputation
Challenge bad bots
Exempt partners from Hotlink Protection
Require a specific cookie
Require a valid HMAC token
Require specific HTTP headers
Require specific HTTP ports
Site administration — Require known IP addresses
Stop R-U-Dead-Yet? (R.U.D.Y.) attacks
Update firewall rules for customers or partners
FAQ

Block Microsoft Exchange Autodiscover requests

In some cases, Microsoft Exchange Autodiscover service requests can be “noisy,” triggering large numbers of HTTP 404 (Page Not Found) errors.

This example uses the matches comparison operator and a regular expression to block autodiscover.xml and autodiscover.src requests:

Expression	Action
`http.request.uri.path matches "/autodiscover.(xml\|src)$"`	Block