Can Cloudflare Help me Hide my Sitemap from Attackers

[Beacan12]

Please can anyone help me here. I am using the 20$ package for my website example .com. It there a way I can stop attacker from viewing my sitemap.

I want to hide my sitemap XML file from all but allow access from search engines alone.

What is the way to do it?

 

[$hitCanBeer]

Please can anyone help me here. I am using the 20$ package for my website example .com. It there a way I can stop attacker from viewing my sitemap.

I want to hide my sitemap XML file from all but allow access from search engines alone.

What is the way to do it?

No but it will stop DDOS attacks and other scam like behavior. That's about the only thing it is good for. Downside is that they block VPNs like crazy and automatically assume they are up to no good and blocks that traffic.

 

[Beacan12]

If any How I made the Sitemap non-accessible to for end users and made accessible to Bots.

in this moment does it affect on google SERP and indexing?

 

[kingamit]

You could give your sitemap.xml a hard-to-guess name such as sited24sds.xml. Then you could submit it to search engines through their Webmaster interface. Of course, you should not declare your sitemap in your robots.txt. It is not 100% a perfect solution, but it is easy to implement i guess...

 

[StrikeRDP]

You can make 2 rules and move allow one into the top (in WAF > Custom Rule), and only allow access by verified bots to special link.
Here is an example:
Allow rule:
(http.request.full_uri eq "https://example.com/sitemap.xml" and cf.client.bot)
Block rule:
(http.request.full_uri eq "https://example.com/sitemap.xml")