Cloudflare Developers•2y ago

Thats not just ssh firewall just because there are ssh messages

KasumiOP•3/21/24, 1:03 PM

Why it should just include ssh if its a journal log

KKasumi Thats not just ssh firewall just because there are ssh messages

Isaac McFadyen•3/21/24, 1:03 PM

Yes, I just mean that there are no logs for the HTTP firewall in there.

KasumiOP•3/21/24, 1:04 PM

IIsaac McFadyen Yes, I just mean that there are no logs for the HTTP firewall in there.

KasumiOP•3/21/24, 1:04 PM

Yes why Cloudflare then cant connect to my Origin

Isaac McFadyen•3/21/24, 1:04 PM

Also, it looks like those are only logging denied messages.

KasumiOP•3/21/24, 1:04 PM

If theres no request

IIsaac McFadyen Also, it looks like those are only logging denied messages.

KasumiOP•3/21/24, 1:04 PM

It should log everything

Isaac McFadyen•3/21/24, 1:04 PM

Perhaps it's being allowed through the firewall but the webserver or Apache or whatever is blocking it?

IIsaac McFadyen Perhaps it's being allowed through the firewall but the webserver or Apache or w...

KasumiOP•3/21/24, 1:04 PM

No why it should

KasumiOP•3/21/24, 1:04 PM

https, http, 443,80 is allowed

KKasumi It should log everything

Isaac McFadyen•3/21/24, 1:05 PM

I don't see any logs for allowed connections.

Isaac McFadyen•3/21/24, 1:05 PM

Only REJECT messages

IIsaac McFadyen I don't see any logs for allowed connections.

KasumiOP•3/21/24, 1:05 PM

Why it should show allowed things when Cloudflare is getting blocked

KasumiOP•3/21/24, 1:05 PM

Or doesnt even send anything or so

KKasumi Or doesnt even send anything or so

Isaac McFadyen•3/21/24, 1:06 PM

That's what I mean. If the firewall is working fine and allowing Cloudflare through but something else is blocking it (i.e. Apache) then you wouldn't see any logs

Isaac McFadyen•3/21/24, 1:06 PM

Which is the case here

KasumiOP•3/21/24, 1:06 PM

And tcpdump is useless af too because there are just a lot of arpa things spamming around

SZ3R0•3/21/24, 1:06 PM

Hi there. Where i can make a report about a website used for scamming and hosted on cloudfire?

SSZ3R0 Hi there. Where i can make a report about a website used for scamming and hosted...

Isaac McFadyen•3/21/24, 1:06 PM

?abuse

Flare•3/21/24, 1:06 PM

If you feel that a site is engaging in illegal or inappropriate activities, you can submit an abuse report at https://abuse.cloudflare.com/. The Trust and Safety team will review the details and reply if appropriate. You can also report the site to your relevant local authorities. Reports cannot be filed via Discord or with individual employees or Champs.

IIsaac McFadyen That's what I mean. If the firewall is working fine and allowing Cloudflare thro...

KasumiOP•3/21/24, 1:06 PM

but if I stop the firewall then it works

Isaac McFadyen•3/21/24, 1:07 PM

OK, well you didn't say that. So it's definitely an issue with the firewall then...

KasumiOP•3/21/24, 1:07 PM

I hate it so much to work on Firewall or network related things on linux

IIsaac McFadyen OK, well you didn't say that. So it's definitely an issue with the firewall then...

KasumiOP•3/21/24, 1:07 PM

Yes but why

KasumiOP•3/21/24, 1:08 PM

message.txt4.63KB

Isaac McFadyen•3/21/24, 1:08 PM

I'm not sure. Those are definitely the IP addresses Cloudflare is connecting from

KasumiOP•3/21/24, 1:08 PM

Ik that theres one typo

SZ3R0•3/21/24, 1:08 PM

there is a problem about that link...even if i complete the forms under 1 minute when i press submit is telling me that sesion expired

KKasumi *Ik that theres one typo*

Chaika•3/21/24, 1:14 PM

which typo are you talking about? The top entry is wrong, should be 48 instead of 45

Chaika•3/21/24, 1:14 PM

sudo firewall-cmd --permanent --ipset=Cloudflarev4 --add-entry=173.245.45.0/20
vs
173.245.48.0/20

KasumiOP•3/21/24, 1:16 PM

Okay

KasumiOP•3/21/24, 1:17 PM

But there's one typo in one rule set somewhere. But I'll try that after the meeting I've rn

CChaika sudo firewall-cmd --permanent --ipset=Cloudflarev4 --add-entry=173.245.45.0/20 v...

KasumiOP•3/21/24, 2:26 PM

Nop still not working

KKasumi Nop still not working

Chaika•3/21/24, 2:33 PM

well idk firewalld enough to help, I use ufw personally.
Could try this though: https://gist.github.com/mrgarymartin/38618aaf27096af6959b5b9c4611779d
good idea to have it auto updating anyway

Gist

Updated version to whitelist all cloudflare ips in firewalld

Updated version to whitelist all cloudflare ips in firewalld - firewall.sh

CChaika well idk firewalld enough to help, I use ufw personally. Could try this though: ...

KasumiOP•3/21/24, 2:34 PM

I stopped using ufw. Because UFW blocked nothing or so

Chaika•3/21/24, 2:35 PM

sounds like configuration error

KasumiOP•3/21/24, 2:36 PM

Nop. Everything was set up right. I asked other peoples, I asked ChatGPT and all of them said that there are no issues

delta•3/21/24, 3:03 PM

ufw is just wrapper for iptables, if iptables works for you ufw should do same

delta•3/21/24, 3:03 PM

or you are using docker or etc

Original message was deleted

Cyb3r-Jak3•3/21/24, 3:59 PM

I believe that can happen as part of the billing migration

Chaika•3/21/24, 4:19 PM

Original message was deleted

Hello, I’m Allie!•3/21/24, 4:48 PM

Your nameservers?

Original message was deleted

Hello, I’m Allie!•3/21/24, 4:48 PM

https://blog.cloudflare.com/whats-the-story-behind-the-names-of-cloudflares-name-servers/

The Cloudflare Blog

What's the story behind the names of CloudFlare's name servers?

We're going to do a series of blog posts about some of the inner workings of CloudFlare. One of the questions we get often is what the names of our name servers mean. Here's the story.

Original message was deleted

Chaika•3/21/24, 4:49 PM

(Side note: They're just account preferred. If you want a different one, preset them at your registrar before adding the domain to CF, and it'll pick two new ones)

Rapid•3/21/24, 5:19 PM

Is anyone familiar with a worker/lambda that exports analytics and logs data every hour to a storage? maybe github repo or something

Rapid•3/21/24, 5:19 PM

Just because I want to save history

HHello, I’m Allie!https://blog.cloudflare.com/whats-the-story-behind-the-names-of-cloudflares-name...

Tricked•3/21/24, 5:45 PM

funny how all the old blog posts use CloudFlare :lul:

TTricked funny how all the old blog posts use CloudFlare :lul:

Hello, I’m Allie!•3/21/24, 5:47 PM

That was originally the name

Hello, I’m Allie!•3/21/24, 5:47 PM

They changed it after a few years

TTricked funny how all the old blog posts use CloudFlare :lul:

Erisa•3/21/24, 5:47 PM

https://blog.cloudflare.com/time-for-an-update

The Cloudflare Blog

Six years old and time for an update: CloudFlare becomes Cloudflare

Today, Cloudflare turns six years old, and if you’re reading this on our blog, you may have noticed that we look a bit different today than the cloudflare.com that you’ve visited in the past. More on that a bit later in this post.

Thats not just ssh firewall just because there are ssh messages

Similar Threads

Similar Threads

Similar Threads