About

Review the content below to learn more about concepts related to Magic Firewall.

Important

When using Magic Firewall alongside other Cloudflare services that proxy traffic (for example, CDN and Spectrum), be aware of the following:

• Firewall rules that block traffic based on source IP address may not work as intended because rules are evaluated after Cloudflare terminates the incoming TCP connections.
• You must allow Cloudflare IP addresses ↗.
• When using Magic Firewall, fragmented packets are reassembled into complete packets before they are inspected. As a result, you cannot create firewall rules for fragments.

• Analytics
• IDS
• List types
• Protocol validation rules
• Ruleset logic
• Traffic types

Was this helpful?

What did you like?

Accurate

Easy to understand

Solved my problem

Helped me decide to use the product

Other

What went wrong?

Hard to understand

Incorrect information

Missing the information

Other

Thank you for helping improve Cloudflare's documentation!