Cloudfare doesn't protect all my sub-domains :/


#1

Cloudfare doesn’t protect all my sub-domains :confused:
So someone resolved my site which is protected with cf and now he attack my website for hours :c


#2

If you have it set to :orange: in your Cloudflare DNS, then it’s mostly protected*.

*Protected unless someone goes straight to your origin IP address. This is why I have my firewall at my host set up to block anything that doesn’t come through Cloudflare’s IP addresses:


#3

And what’s your “Firewall” ?


#4

DigitalOcean and Vultr have their own network firewall. A Ubuntu server has ufw. There’s also iptables. Note that these all apply to dedicated, not shared servers.

What I did on a shared server was block anybody not showing up with a Cloudflare header: