Hopefully it’s helpful, but I also wrote a general guide to the best settings here:
A Cloudflare staff member also added some pointers and corrections in the comments section.
I’m updating that guide and was trying to see if there was any new advice from Discourse and found this page.
I will be adding these to my managed rules. Thank you!
Here’s an overview of my custom rules. This has really help reduce spam and often times (not always) some of the lowest quality traffic comes in via VPNs and DC traffic which these have helped:
I will make a proper write-up with the full contents of the rules, have been running these for about 6 months and validating their success by using the Log Explorer tool and inspecting 10k events at a time.