Problem with Cloudflare and Wind/Tre connection (Italy)

Hi guys, on my site, with active cloudflare, my problem with the Italian operator “Wind/Tre”. Users who have this connection cannot access my site. Below are some tests from Wind connection. If I disable the cloudflare proxy, the problem doesn’t occur How can I fix?

Thank you

C:\Users***>nslookup www.milanworld.net
Server: dns.google
Address: 8.8.8.8

Non-authoritative answer:
Name: www.milanworld.net
Addresses: 2606:4700:20::681a:ada
2606:4700:20::681a:bda
2606:4700:20::ac43:48f0
172.67.72.240
104.26.11.218
104.26.10.218

C:\Users***>nslookup www.milanworld.net 8.8.8.8
Server: dns.google
Address: 8.8.8.8

Non-authoritative answer:
Name: www.milanworld.net
Addresses: 2606:4700:20::681a:ada
2606:4700:20::681a:bda
2606:4700:20::ac43:48f0
104.26.11.218
104.26.10.218
172.67.72.240

C:\Users***>nslookup www.milanworld.net 1.1.1.1
Server: one.one.one.one
Address: 1.1.1.1

Non-authoritative answer:
Name: www.milanworld.net
Addresses: 2606:4700:20::681a:ada
2606:4700:20::ac43:48f0
2606:4700:20::681a:bda
104.26.11.218
172.67.72.240
104.26.10.218

C:\Users***>tracert www.milanworld.net

Tracing route to www.milanworld.net [172.67.72.240]
over a maximum of 30 hops:

1 4 ms 5 ms 3 ms 192.168.149.123
2 55 ms 53 ms 42 ms 172.16.138.129
3 86 ms 47 ms 40 ms 172.16.138.42
4 149 ms 41 ms 34 ms 172.16.2.50
5 210 ms 48 ms 47 ms 151.6.52.207
6 50 ms 44 ms 72 ms 151.6.52.234
7 110 ms 55 ms 47 ms 151.6.3.188
8 53 ms 45 ms 48 ms 151.6.1.178
9 * * * Request timed out.
10 130 ms 47 ms 49 ms 188.114.100.11
11 53 ms 61 ms 42 ms 172.67.72.240

Trace complete.

Test #2
C:\Users\Vincenzo>tracert www.milanworld.net

Traccia instradamento verso www.milanworld.net [104.26.11.218]
su un massimo di 30 punti di passaggio:

1 <1 ms <1 ms <1 ms RT-AX82U-F768 [192.168.50.1]
2 1 ms <1 ms <1 ms fritz.box [192.168.1.1]
3 11 ms 12 ms 11 ms 151.6.141.22
4 11 ms 11 ms 11 ms 151.6.52.248
5 17 ms 17 ms 17 ms 151.6.3.192
6 17 ms 17 ms 17 ms 151.6.7.231
7 17 ms 16 ms 16 ms 151.7.80.73
8 * * * Richiesta scaduta.
9 * * * Richiesta scaduta.
10 * * * Richiesta scaduta.
11 * * * Richiesta scaduta.
12 * * * Richiesta scaduta.
13 * * * Richiesta scaduta.
14 * * * Richiesta scaduta.
15 * * * Richiesta scaduta.
16 * * * Richiesta scaduta.
17 * * * Richiesta scaduta.
18 * * * Richiesta scaduta.
19 * * * Richiesta scaduta.
20 * * ^C
C:\Users\Vincenzo>
C:\Users\Vincenzo>
C:\Users\Vincenzo>
C:\Users\Vincenzo>tracert www.milanworld.net

Traccia instradamento verso www.milanworld.net [172.67.72.240]
su un massimo di 30 punti di passaggio:

1 <1 ms <1 ms <1 ms RT-AX82U-F768 [192.168.50.1]
2 <1 ms <1 ms <1 ms fritz.box [192.168.1.1]
3 12 ms 13 ms 14 ms 151.6.141.22
4 13 ms 12 ms 11 ms 151.6.52.248
5 16 ms 15 ms 15 ms 151.6.7.32
6 16 ms 15 ms 16 ms 151.6.1.178
7 16 ms 16 ms 16 ms cloudflare.mix-it.net [217.29.66.167]
8 17 ms 18 ms 17 ms 172.71.112.4
9 16 ms 16 ms 16 ms 172.67.72.240

Traccia completata.

C:\Users\Vincenzo>tracert www.milanworld.net

Traccia instradamento verso www.milanworld.net [172.67.72.240]
su un massimo di 30 punti di passaggio:

1 <1 ms <1 ms <1 ms RT-AX82U-F768 [192.168.50.1]
2 <1 ms <1 ms <1 ms fritz.box [192.168.1.1]
3 11 ms 10 ms 11 ms 151.6.141.22
4 11 ms 11 ms 11 ms 151.6.52.248
5 16 ms 15 ms 15 ms 151.6.7.32
6 17 ms 16 ms 16 ms 151.6.1.178
7 17 ms 17 ms 16 ms cloudflare.mix-it.net [217.29.66.167]
8 22 ms 19 ms 19 ms 172.71.112.4
9 17 ms 16 ms 15 ms 172.67.72.240

Traccia completata.

The traceroute that you provided here:

says that the traffic towards that Cloudflare IP address is ending within Wind/Tre’s network.

Such things have been seen before when the ISP (e.g., Wind/Tre in this specific case) is blocking access to specific IP addresses and/or IP ranges, as an attempt to block access to specific sites.

Unfortunately, blocking websites by IP address does not offer per-site granularity, and will, as close to always as it can be, be resulting in situations like this, with the collateral damage where a lot of innocent sites are being hit as well.

Contact Wind/Tre, and request them to look in to the situation of why traffic to this destination (that specific IP address) doesn’t exit their network, as well as request them remediate the issue.

Thank you!

Hi, I’m still having the same problem. I contacted the Wind operator, but I did not receive any response. I would like to know if it is possible to deactivate the Cloudflare proxy only for specific records in order to exclude only users who browse with Wind from the Cloudflare proxy. Thank you.

The Proxy status does not allow for such kind of granularity.