- Cloudflare Developers

Cloudflare Developers•3y ago

Kasumi

message.txt4.71KB

KasumiOP•9/3/23, 4:23 PM

Thats the rule I have

KKasumi Click to see attachment

Cyb3r-Jak3•9/3/23, 4:26 PM

Your second rule is 80,443/tcp DENY IN Anywhere80,443/tcp DENY IN Anywhere

KasumiOP•9/3/23, 4:27 PM

Shouldnt it be on deny so it denies every request that doesnt matches all the others?

Cyb3r-Jak3•9/3/23, 4:28 PM

Yeah but the order matters. It sees the deny before any allow rule

KasumiOP•9/3/23, 4:28 PM

But I dont think this works,

KasumiOP•9/3/23, 4:28 PM

BEcause I set it now to allow reloaded it and its still loading very slowly

KasumiOP•9/3/23, 4:28 PM

aka again 504

KasumiOP•9/3/23, 4:29 PM

Yea everything is now on ALLOW

KasumiOP•9/3/23, 4:35 PM

I reseted now ufw and allowed https,http and ssh but still nothing. Cloudflare uses 80 and / or 443 right?

KKasumi I reseted now ufw and allowed https,http and ssh but still nothing. Cloudflare u...

Cyb3r-Jak3•9/3/23, 4:36 PM

Correct, unless you pass a different port

KasumiOP•9/3/23, 4:37 PM

no i dont 443 and 80 is also the only web port I have open in the router

KasumiOP•9/3/23, 4:37 PM

Very weird thing, I try to move from ufw & iptables to firewalld. Hopefully this helps

KasumiOP•9/3/23, 4:58 PM

Fixed with firewalld

Erisa•9/3/23, 5:23 PM

Those would be IPv6 addresses

Erisa•9/3/23, 5:23 PM

They are normal addresses

Erisa•9/3/23, 5:24 PM

Cloudflare supports both IPv4 and IPv6 for incoming traffic, if the client connects over IPv6 then you will see its IPv6 address

Erisa•9/3/23, 5:26 PM

You can, but why would you want to? Does your application not support IPv6 address?

Erisa•9/3/23, 5:27 PM

I'd recommend giving this a read https://developers.cloudflare.com/support/network/understanding-and-configuring-cloudflares-ipv6-support/

Understanding and configuring Cloudflare's IPv6 support · Cloudflar...

Cloudflare provides free IPv6 support to all domains without requiring additional configuration or hardware.

Erisa•9/3/23, 5:29 PM

X-Forwarded-For will contain additional addresses (comma separated iirc) if the cient provides one

Erisa•9/3/23, 5:29 PM

if you only want the one client IP, I would strongly recommend using Cf-Connecting-IP

Erisa•9/3/23, 5:31 PM

Assuming your library is following the HTTP specification, no, headers are not case sensitive

Erisa•9/3/23, 5:32 PM

I would just try cf-connecting-ipcf-connecting-ip and if it works then keep it

KasumiOP•9/3/23, 8:07 PM

ipv6 is the next lvl shiq

KasumiOP•9/3/23, 8:08 PM

I just hope that ipv4 gets removed soon

KasumiOP•9/3/23, 8:12 PM

Is it possible to add a onion domain to the custom Cloudflare origin Certificates or not? gx_heh

Cyb3r-Jak3•9/3/23, 8:14 PM

I don't believe it is possible and even if it was, there wouldn't be any point because Cloudflare's Origin CA certificate is self-signed

KasumiOP•9/3/23, 8:15 PM

yea also true lmao

KasumiOP•9/4/23, 12:15 PM

The cf Access page cant be embedded or edited right?

KasumiOP•9/4/23, 1:11 PM

Uhm whats wrong there?

KasumiOP•9/4/23, 1:12 PM

KasumiOP•9/4/23, 1:22 PM

thanks

KasumiOP•9/4/23, 1:26 PM

KasumiOP•9/4/23, 10:24 PM

Just a small recommendation. Isn't it better replacing the Timedate with the discord timestamp Format?

KasumiOP•9/4/23, 10:24 PM

Like this September 4, 2023 or this September 4, 2023

Similar Threads