I'm using CloudFlare in a shared environment and I'm trying to help block non-CloudFlare users who circumvent to my origin IP. Loading up the web page I see the header server: "cloudflare". So I tried the following htaccess code and I get a 403 right away.
RewriteCond %{HTTP:server-header} !^cloudflare$ [NC]
RewriteRule ^ - [F]
RewriteCond %{HTTP:x-server-header} !^cloudflare$ [NC]
RewriteRule ^ - [F]
I've also tried variances of the code and nothing works.