> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.jboard.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How to Set Up Bot Protection for Your Job Board?

To reduce unwanted bot traffic, we recommend enabling advanced bot protection features through Cloudflare. This guide walks you through the steps to configure bot protection rules using Cloudflare.

||| In order to apply any Cloudflare security rules, your domain **must be connected to and proxied through Cloudflare**. If your domain is not yet behind Cloudflare, please [follow the steps in this help guide](/en/article/setting-up-cloudflare-for-your-job-boards-domain-67d2yf/) before proceeding.

### Bot Fight Mode

This tool blocks known bots from accessing your job board. To enable it, go to **Security > Bots** in your Cloudflare dashboard and toggle on **Bot Fight Mode**.

![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXdO9Yn3b7eFVGre_78xGhl_ULwJyElaB65oIbB3jkUveuQ2EeiSnsiHpy2Bqdk8wSNABBCshKEoAUA0hvqe8FI-2mThhierT3DE9_UVAvXZpfPJ0W5llPlxw4c8_mjEg1Ij8UUnwg?key=S3uMpeLdSBeafsuaqEOj-Q)

### Advanced: Enable Firewall Protection

If you want to further enhance bot detection, go to **Security > WAF** in your Cloudflare dashboard, then click on **+ Create Rule** under the **Custom Rules** tab.

![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXelQWjPL9RIQt-l3lbDYOWSwJGTyU-X7Z0SpShLkm7FC9DT5gpIzDuoJF9PgaTlzvAALSgsg7vbWygjX11u3aMtsTrBlfNdgS5SYK4zeTRSUHYha1vx1Uo5KYxGuc2Z1PazDMLs0g?key=S3uMpeLdSBeafsuaqEOj-Q)

1. **Rule Name:** Provide an internal name for your rule.
2. **Edit Expression:** Under **Expression Preview**, click on **Edit Expression** in the top-right and paste the following expression:

`not (cf.client.bot)` 

This expression targets traffic that is not from verified bots.

3. **Actions:** From the **Actions** dropdown, choose `Managed Challenge`.
4. **Deploy the Rule**

![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXex0kUkRn6DhJdI-Nm0S-D0NdyHUnLhTA3SNBgMtaNGsPhyjpkDBlRvzXr1NIsq__kA2cSmrBB6yXQm2wm3IW-f4Qk587RKnaYKb0t6RfrPieZaWcOIPVJLhMmCnw_Fi0AeS8T0sQ?key=S3uMpeLdSBeafsuaqEOj-Q)

Once the rule is enabled, suspicious or unverified traffic will be challenged by Cloudflare before it can access your site. Visitors that trigger the rule will see a security verification screen, like the one below, to confirm they are human.

![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXePwjPUVesM9ga19pF8WyVF9K20qOA1Hv2lXoWtjmb_i_u5hf8xpA93AfGk-2NP9sF9zhVmCyvKd42upw3I8JehSnfMNynYfEBRQdPPIqOZOgXP2lIs8ET7Z4EUoDqNH2AX-5ASUA?key=S3uMpeLdSBeafsuaqEOj-Q)