Cloudfare doesn't protect all my sub-domains :/

Cloudfare doesn’t protect all my sub-domains :confused:
So someone resolved my site which is protected with cf and now he attack my website for hours :c

If you have it set to :orange: in your Cloudflare DNS, then it’s mostly protected*.

*Protected unless someone goes straight to your origin IP address. This is why I have my firewall at my host set up to block anything that doesn’t come through Cloudflare’s IP addresses:

And what’s your “Firewall” ?

DigitalOcean and Vultr have their own network firewall. A Ubuntu server has ufw. There’s also iptables. Note that these all apply to dedicated, not shared servers.

What I did on a shared server was block anybody not showing up with a Cloudflare header:

This topic was automatically closed after 31 days. New replies are no longer allowed.