Can Cloudflare Help me Hide my Sitemap from Attackers

Beacan12

Junior Member

Dec 13, 2021

105

53

• Jul 31, 2023

• #1

Please can anyone help me here. I am using the 20$ package for my website example .com. It there a way I can stop attacker from viewing my sitemap.

I want to hide my sitemap XML file from all but allow access from search engines alone.

What is the way to do it?

 

$hitCanBeer

Newbie

Aug 1, 2023

29

11

• Aug 1, 2023

• #2

Beacan12 said:

Please can anyone help me here. I am using the 20$ package for my website example .com. It there a way I can stop attacker from viewing my sitemap.

I want to hide my sitemap XML file from all but allow access from search engines alone.

What is the way to do it?

Click to expand...

No but it will stop DDOS attacks and other scam like behavior. That's about the only thing it is good for. Downside is that they block VPNs like crazy and automatically assume they are up to no good and blocks that traffic.

 

Beacan12

Junior Member

Dec 13, 2021

105

53

• Aug 5, 2023
• Thread Starter Thread Starter

• #3

If any How I made the Sitemap non-accessible to for end users and made accessible to Bots.

in this moment does it affect on google SERP and indexing?

 

kingamit

Registered Member

Jun 1, 2009

59

13

• Aug 5, 2023

• #4

You could give your sitemap.xml a hard-to-guess name such as sited24sds.xml. Then you could submit it to search engines through their Webmaster interface. Of course, you should not declare your sitemap in your robots.txt. It is not 100% a perfect solution, but it is easy to implement i guess...

 

S

StrikeRDP

Newbie

Jun 16, 2022

40

16

• Aug 5, 2023

• #5

You can make 2 rules and move allow one into the top (in WAF > Custom Rule), and only allow access by verified bots to special link.
Here is an example:
Allow rule:
(http.request.full_uri eq "https://example.com/sitemap.xml" and cf.client.bot)
Block rule:
(http.request.full_uri eq "https://example.com/sitemap.xml")