Skip to content

Cloudflare Docs

Cloudflare Docs

Magic Transit home
Blog: Magic WAN & Magic Firewall
Cloudflare homepage

Overview
Plans
About
Analytics
List types
Traffic types
IDS
Ruleset logic
How to
Add rules
Form expressions
Use IP Lists
PCAPs bucket setup
Collect PCAPs
Enable IDS
Enable Magic user roles
Enable Managed Rulesets
Filter different views
Use Logpush with IDS
Best practices
Minimal ruleset
Extended ruleset
Magic Transit egress
Tutorials
GraphQL Analytics
Reference
Examples
Magic Firewall fields
Magic Firewall functions

Visit Magic Firewall on GitHub

Set theme to dark (⇧+D)

↑ Top

Products
Magic Firewall
About

About

Review the content below to learn more about concepts related to Magic Firewall.

Important

When using Magic Firewall with other Cloudflare services that proxy traffic (for example, CDN and Spectrum), be aware of the following:

Firewall rules that block traffic based on source IP address may not work as intended because rules are evaluated after Cloudflare terminates the incoming TCP connections.
You must allow Cloudflare IP addresses.
When using Magic Firewall, fragmented packets are reassembled into complete packets before they are inspected. As a result, you cannot create firewall rules for fragments.

Analytics
List types
Traffic types
IDS
Ruleset logic

Cloudflare Dashboard Open external link · Community Open external link · Learning Center Open external link · Support Portal Open external link · Cookie Settings

Edit on GitHub Open external link · Updated June 4, 2023