Cloudflare Developers•3y ago

I reseted now ufw and allowed https,http and ssh but still nothing. Cloudflare uses 80 and / or 443

I reseted now ufw and allowed https,http and ssh but still nothing. Cloudflare uses 80 and / or 443 right?

KKasumi I reseted now ufw and allowed https,http and ssh but still nothing. Cloudflare u...

Cyb3r-Jak3•9/3/23, 4:36 PM

Correct, unless you pass a different port

KasumiOP•9/3/23, 4:37 PM

no i dont 443 and 80 is also the only web port I have open in the router

KasumiOP•9/3/23, 4:37 PM

Very weird thing, I try to move from ufw & iptables to firewalld. Hopefully this helps

KasumiOP•9/3/23, 4:58 PM

Fixed with firewalld

Erisa•9/3/23, 5:23 PM

Those would be IPv6 addresses

Erisa•9/3/23, 5:23 PM

They are normal addresses

Erisa•9/3/23, 5:24 PM

Cloudflare supports both IPv4 and IPv6 for incoming traffic, if the client connects over IPv6 then you will see its IPv6 address

Erisa•9/3/23, 5:26 PM

You can, but why would you want to? Does your application not support IPv6 address?

Erisa•9/3/23, 5:27 PM

I'd recommend giving this a read https://developers.cloudflare.com/support/network/understanding-and-configuring-cloudflares-ipv6-support/

Understanding and configuring Cloudflare's IPv6 support · Cloudflar...

Cloudflare provides free IPv6 support to all domains without requiring additional configuration or hardware.

Erisa•9/3/23, 5:29 PM

X-Forwarded-For will contain additional addresses (comma separated iirc) if the cient provides one

Erisa•9/3/23, 5:29 PM

if you only want the one client IP, I would strongly recommend using Cf-Connecting-IP

Erisa•9/3/23, 5:31 PM

Assuming your library is following the HTTP specification, no, headers are not case sensitive

Erisa•9/3/23, 5:32 PM

I would just try cf-connecting-ipcf-connecting-ip and if it works then keep it

KasumiOP•9/3/23, 8:07 PM

ipv6 is the next lvl shiq

KasumiOP•9/3/23, 8:08 PM

I just hope that ipv4 gets removed soon

KasumiOP•9/3/23, 8:12 PM

Is it possible to add a onion domain to the custom Cloudflare origin Certificates or not? gx_heh

Cyb3r-Jak3•9/3/23, 8:14 PM

I don't believe it is possible and even if it was, there wouldn't be any point because Cloudflare's Origin CA certificate is self-signed

KasumiOP•9/3/23, 8:15 PM

yea also true lmao

KasumiOP•9/4/23, 12:15 PM

The cf Access page cant be embedded or edited right?

KasumiOP•9/4/23, 1:11 PM

Uhm whats wrong there?

KasumiOP•9/4/23, 1:12 PM

KasumiOP•9/4/23, 1:22 PM

thanks

KasumiOP•9/4/23, 1:26 PM

KasumiOP•9/4/23, 10:24 PM

Just a small recommendation. Isn't it better replacing the Timedate with the discord timestamp Format?

KasumiOP•9/4/23, 10:24 PM

Like this September 4, 2023 or this September 4, 2023

KasumiOP•9/5/23, 8:14 AM

Is there also one for firewalld?
https://developers.cloudflare.com/fundamentals/setup/allow-cloudflare-ip-addresses/

Allow Cloudflare IP addresses · Cloudflare Fundamentals docs

Because of how Cloudflare works, all traffic to proxied DNS records passes through Cloudflare before reaching your origin server. This means that your …

Erisa•9/5/23, 8:22 AM

There's not an example for it, you would need to work that out yourself

KasumiOP•9/5/23, 8:28 AM

Okay

KasumiOP•9/5/23, 8:28 AM

Because I want to block every other traffic that isnt from Cloudflare

KasumiOP•9/5/23, 8:28 AM

aka drop it

Erisa•9/5/23, 8:28 AM

You can do that, I just don't know the right commands for it

KasumiOP•9/5/23, 8:34 AM

Yea me too and ChatGPT isnt helpful AYS_WobblesLaugh

KKasumi Just a small recommendation. Isn't it better replacing the Timedate with the dis...

Hello, I’m Allie!•9/5/23, 8:38 AM

Where is this at?

HHello, I’m Allie!Where is this at?

KasumiOP•9/5/23, 8:39 AM

How you mean?

I reseted now ufw and allowed https,http and ssh but still nothing. Cloudflare uses 80 and / or 443

Similar Threads

Similar Threads

Similar Threads