Restrict access to lead intake paths with Cloudflare
Turn lead intake signals into a deliberate access-control step for the URLs and IP ranges your team specifies.
Trigger
New Lead Trigger
Triggers when a new Lead is created in Salesforce.
Action
Create Zone Lockdown Rule
Tool to create a Zone Lockdown rule. Use when you need to restrict access to specific URL patterns to defined IPs/CIDR ranges. Use after confirming zone_id.
Why this helps
Teams can lose track of which intake paths should be restricted and who has approved the allowed IP range.
- Surface the access rule task as soon as a lead arrives.
- Keep URL patterns and allowed IP ranges explicit in the prompt.
- Send a run report so the team can review the outcome.
Setup
Build it in a few focused steps.
- 1Connect Salesforce and Cloudflare api key once in the Notis portal.
- 2Create an automation in Automations, New Automation, and name it for the intake path.
- 3In one instruction, describe the URL pattern and approved IP or CIDR ranges for the lockdown rule.
- 4Pick New Lead Trigger and choose where run reports go.
- 5Test with one real lead example and verify the zone and rule details.
Questions about this workflow
Can Notis infer the allowed IP range from a lead?
No. Include the approved IP or CIDR range and URL pattern in the instruction or another available input.
What does Cloudflare require before creating the rule?
The correct zone_id must be confirmed. Make sure the prompt or process supplies the correct zone context before the action runs.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Salesforce to Cloudflare api key. A trigger fires from one place; an action lands in another.
Salesforce triggers
Cloudflare api key actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create DNS Record
Tool to create a new DNS record in a Cloudflare zone. Use when you need to add a record (A, CNAME, TXT, MX, etc.) to a specified zone.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Create Zone Lockdown Rule
Tool to create a Zone Lockdown rule. Use when you need to restrict access to specific URL patterns to defined IPs/CIDR ranges. Use after confirming zone_id.
Account Created or Updated
Triggers when an Account is created or updated in Salesforce. Uses LastModifiedDate high-watermark to capture both creations and updates.
Create Rule in Ruleset
Tool to add a rule to an existing ruleset. Use when you need to append or insert a new rule in a Cloudflare ruleset.
Contact Updated
Triggers when an existing Salesforce Contact record is modified. Emits changed fields alongside relevant timestamps.
Create Ruleset
Tool to create an account- or zone-scoped ruleset. Use after defining your ruleset details and selecting the correct scope.
Record Updated (Generic SObject)
Triggers when monitored fields change on any Salesforce SObject. You specify the SObject type and which field values should be returned in the payload. The trigger uses SystemModstamp to detect changes regardless of which specific field changed.
Delete DNS Record
Tool to delete a DNS record. Use when you need to remove a specific DNS record from a zone after confirming both zone and record IDs.
New Contact Trigger
Triggers when a new Contact is Created in Salesforce.
Delete DNSSEC
Tool to delete DNSSEC records for a zone. Use after disabling DNSSEC at the registrar to remove DNSSEC configuration.
New Lead Trigger
Triggers when a new Lead is created in Salesforce.
Delete Rule from Ruleset
Tool to delete a specific rule from a ruleset. Use when you need to remove an outdated or incorrect rule from an account or zone ruleset after confirming IDs.
New or Updated Opportunity
Triggers when a Salesforce Opportunity is created or updated.
Delete Ruleset
Tool to delete all versions of a ruleset. Use when you need to remove a ruleset from an account or zone after confirming no references exist.
Connect any two apps with Notis in the middle.
Salesforce and Cloudflare api key, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare api key.