Reply to thread

Message

<blockquote data-quote="Hypothesis" data-source="post: 461775" data-attributes="member: 83881">Most attacks these days are Layer 7 and can bypass CloudFlare captcha as their not seen as bots or any specific malicious network, they're just hijacked computers or servers, so it's hard to block them. I wouldn't suggest rate-limiting on CloudFlare as the bill will run up quickly and you only get 10,000 requests for free. That sounds like a lot right? Nah, that'll add up very quickly, mostly from people even just visiting your hotel. What you could do is add a check for your URL and make a website redirect so that way all the traffic gets redirected to a specific URL which tends to block any types of requests that are not actual people. But then you'd have to also add a check for parameters, even with a check on that, they could still just switch to another header method such as post.My recommendation is that you look into adding a captcha to your website that isn't CloudFlare, so that way all traffic must go through a captcha before their session is accepted.</blockquote>

[QUOTE="Hypothesis, post: 461775, member: 83881"] Most attacks these days are Layer 7 and can bypass CloudFlare captcha as their not seen as bots or any specific malicious network, they're just hijacked computers or servers, so it's hard to block them. I wouldn't suggest rate-limiting on CloudFlare as the bill will run up quickly and you only get 10,000 requests for free. That sounds like a lot right? Nah, that'll add up very quickly, mostly from people even just visiting your hotel. What you could do is add a check for your URL and make a website redirect so that way all the traffic gets redirected to a specific URL which tends to block any types of requests that are not actual people. But then you'd have to also add a check for parameters, even with a check on that, they could still just switch to another header method such as post. My recommendation is that you look into adding a captcha to your website that isn't CloudFlare, so that way all traffic must go through a captcha before their session is accepted. [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members