Cloudfare doesn't protect all my sub-domains :/


Cloudfare doesn’t protect all my sub-domains :confused:
So someone resolved my site which is protected with cf and now he attack my website for hours :c


If you have it set to :orange: in your Cloudflare DNS, then it’s mostly protected*.

*Protected unless someone goes straight to your origin IP address. This is why I have my firewall at my host set up to block anything that doesn’t come through Cloudflare’s IP addresses:


And what’s your “Firewall” ?


DigitalOcean and Vultr have their own network firewall. A Ubuntu server has ufw. There’s also iptables. Note that these all apply to dedicated, not shared servers.

What I did on a shared server was block anybody not showing up with a Cloudflare header:


This topic was automatically closed after 31 days. New replies are no longer allowed.