0:00
Hi everyone, welcome to Key to Blogging and in this video I will show you some security settings that we get in Cloudflare
0:07
So if you are using Blogger or WordPress website then you might face the bot attack or DDoS attack or any type of hacking
0:15
So Cloudflare will protect us from those threads. And if you are using Adsense then you might face the ad limit due to invalid traffic
0:25
So Cloudflare will increase the security level of your website. So if you are not using Cloudflare, then first of all connect your website to Cloudflare
0:34
and then log into your Cloudflare dashboard and here you will see this option, security
0:40
And as you can see, it has blocked a lot of IP address for us. And as you can see, they have mentioned the country name and it will block by firewall rules
0:49
And here you can see the data during the last six hour or 12 hour or 24 hour or you can select a custom range here
0:58
So first of all let's click on the WAF and here we have set a firewall rule
1:05
So just click on the create firewall rule here. So let me just show you how it looks So you need to create a name like this XML RPC block So if you are using WordPress then you should do this settings So here in the field section you will select the URL and here you can select the contents
1:24
and here you can select the XMLRPC. So the XMLRPC page of your WordPress website will be blocked by firewalls
1:33
So in this way you can improve your security in WordPress. Now let's click on back
1:39
back and let's click on firewall rule again and let's click on cookies countries or you
1:46
can select all the sections here so if you want to block certain URLs or block a certain user
1:52
agents like Bingbot or Google bot you should not block the Google bot or Bingbot but
1:57
but if you have some malicious bot is visiting again and again then you can block that bot by
2:04
clicking on the username and you can select the values now let's click on
2:09
different options so you can individually block a certain IP address by entering
2:18
that IP address here so that in case if some IP address is creating bot attack in your website then you can directly insert that IP address and set a firewall rule So in this way you can set different firewall rules inside your Cloudflare dashboard
2:37
Now let's click on the bot here. Now you will see a option like Bot Fight Mode
2:43
So if you are getting bot traffic then you should enable this option and after that it will
2:48
set a JavaScript challenge to that bot and if the bot failed then it will block that bot
2:54
it will skip all the important bots like Google bot, BingBots. So you should not worry about that
3:01
So if you are getting bot traffic, then I recommend you to enable the bot fight mode
3:07
Now let's click on the DDoS settings here and here Cloudflare will protect us from
3:13
HTTPS DDoS protection, SSL and TLS DDoS attack and Network layer DDoS attacks
3:20
So these are all different type of DDoS attacks that Cloudflare will protect our website so you can select the HTTP DDoS protection so let's click on
3:30
configure here and here you can keep it as default and you can save the settings
3:39
now let click on the tools here so you can set like user agent blocking that we have set in the firewall settings here
3:51
Now let's click on the settings here. Now here you will see this option security levels
3:56
So by default is set to medium. So if you are getting board traffic then you can change it to high or you can change it
4:02
to I am under attack. So generally I set it to medium and you can also set the duration of challenge passage
4:10
So if a bot solve the JavaScript challenge, then it will not show the JavaScript challenge for
4:17
30 minutes. Then after that it will again show that JavaScript challenge. And it will only
4:22
show when you set this option, I am under attack. And here you can see this option
4:27
browser integrity check and privacy pass support. So these are the privacy and security settings
4:33
that you will get in Cloudflare so that it will help you prevent unnecessary bot traffic in
4:40
your website. And if you are using WordPress, then I recommend you to use a plugins like
4:45
WordFense. It also helps you prevent those malicious attacks on your website. So if you found
4:51
this video helpful, then make sure to hit the like button and share your feedback in the
4:56
comment sections. And I will see you in the next video. Thank you
