使用标记覆盖将 WordPress 规则设置为 Block

按照以下步骤创建一条执行托管规则集的规则，并为具有特定标记的规则定义覆盖。

添加规则到一个执行托管规则集的阶段入口点规则集。
配置标记覆盖，为具有给定标记的所有规则设置指定的操作。

区域（Zone）级别示例

本示例使用更新区域入口点规则集操作，在单个 PUT 请求中执行以下两个步骤：

将 http_request_firewall_managed 阶段入口点规则集中的规则列表设置为一条执行 Cloudflare 托管规则集的单一规则。
覆盖具有 wordpress 标记的规则，将操作设置为 block。所有其他规则使用规则集发布者提供的默认操作。

Required API token permissions

At least one of the following token permissions is required:

Response Compression Write
Config Settings Write
Dynamic URL Redirects Write
Cache Settings Write
Custom Errors Write
Origin Write
Managed headers Write
Zone Transform Rules Write
Mass URL Redirects Write
Magic Firewall Write
L4 DDoS Managed Ruleset Write
HTTP DDoS Managed Ruleset Write
Sanitize Write
Transform Rules Write
Select Configuration Write
Bot Management Write
Zone WAF Write
Account WAF Write
Account Rulesets Write
Logs Write
Logs Write

Update a zone entry point rulesetbash

curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/rulesets/phases/http_request_firewall_managed/entrypoint" \
	--request PUT \
	--header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
	--json '{
		"rules": [
				{
						"action": "execute",
						"expression": "true",
						"action_parameters": {
								"id": "<MANAGED_RULESET_ID>",
								"overrides": {
										"categories": [
												{
														"category": "wordpress",
														"action": "block"
												}
										]
								}
						}
				}
		]
	}'

账户（Account）级别示例

本示例使用更新账户入口点规则集操作，在单个 PUT 请求中执行以下两个步骤：

将 http_request_firewall_managed 阶段入口点规则集中的规则列表设置为一条规则，该规则为区域 example.com 执行 Cloudflare 托管规则集。
覆盖具有 wordpress 标记的规则，将操作设置为 block。所有其他规则使用规则集发布者提供的默认操作。

Required API token permissions

At least one of the following token permissions is required:

Mass URL Redirects Write
Magic Firewall Write
L4 DDoS Managed Ruleset Write
Transform Rules Write
Select Configuration Write
Account WAF Write
Account Rulesets Write
Logs Write

Update an account entry point rulesetbash

curl "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/rulesets/phases/http_request_firewall_managed/entrypoint" \
	--request PUT \
	--header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
	--json '{
		"rules": [
				{
						"action": "execute",
						"expression": "cf.zone.name eq \"example.com\" and cf.zone.plan eq \"ENT\"",
						"action_parameters": {
								"id": "<MANAGED_RULESET_ID>",
								"overrides": {
										"categories": [
												{
														"category": "wordpress",
														"action": "block"
												}
										]
								}
						}
				}
		]
	}'