Hi, hopefully i can get some help with my issue.
I did a security check on my site, and i notice that it’s possible to view all kinds of information on shodan.io & censys.io such as:
IP
ISP
Country
Web Technologies
HTTP/1.1
Server:
Date:
Content-Type:
Content-Length:
Connection:
Location: https://
Expires:
Cache-Control:
Ports
Services
SSL Certificate
Ect
Obviously i wish to block shodan & censys from being able to scan my domain.
Im still new to security on webservers and sites but it was my understanding that Cloudflare would block most of this information.
So i must have missed to configure something. I would like some help to fix this.
I asked scott helme for advice and he told me,
" You’d need to configure your server to only answer requests from Cloudflare.
It’s likely becuse your servers are accepting traffic on your IP address from anywhere. If your server is behind Cloudflare, or any CDN, you should restrict it to only answer requests that come from a Cloudflare IP address. "
So i have been trying to do as scott suggested but i’ve gotten nowhere.
He also told me that he had been using iptables in the past but as i understand that is only available for linux. And as i use windows as a server os, how would i configure this on windows?
You can’t hide historical data about your site. So you’d better patch up what you’ve got.
I don’t use Windows Server, so I don’t know what’s available for blocking ports and firewalling non-Cloudflare IP addresses. Sometimes the Host Provider has their own firewall setup that’s good at this. I know DigitalOcean and Vultr have such features.
It depends on the router. But I bet Windows Server has its own firewall you can configure to block non-Cloudflare access to Ports 80 and 443, plus any other ports you want to protect.
