Urgent allow access to the site in a ip range

Security Security Center
#1

How can I make that only certain IPs (there is a IP range) access my site?

#2

only in a record dns*

#4

You can create a firewall rule for IPv4 addresses:

https://developers.cloudflare.com/firewall/cf-dashboard/create-edit-delete-rules/

1 Like
#5

Yes, but i can’t do only in a record dns (like test.killteamseller.it)

#6

You want to limit access to a subdomain?

#7

Yes, only in a subdomain

#8

Try this:

1 Like
#9

So you’ll need:

hostname - Equals - test.killteamseller.it

AND

IP Source Address - Equals (or “Is in list”) - xxxxxx

something like that…

1 Like
#10

Ohh, thank you! But i can’t setup a ip range to allow (i have a ip range)

#11

CIDR range?

#12

Yes.

https://core.telegram.org/resources/cidr.txt
i mean CIDR with this ip ranges

#13

CIDR ranges can be entered, but can only be used with ‘in’ operators, like “is in”.

1 Like
#14

what i need to put? all ips?

like
91.108.56.0/22
91.108.4.0/22
91.108.8.0/22
91.108.16.0/22
91.108.12.0/22
149.154.160.0/20
91.105.192.0/23
91.108.20.0/22
185.76.151.0/24
2001:b28:f23d::/48
2001:b28:f23f::/48
2001:67c:4e8::/48
2001:b28:f23c::/48
2a0a:f280::/32

thank you

#15

Yes, you keep adding the CIDRs in. It will look like this (I only did the first two):

image
image1692×1273 150 KB

1 Like
#16

Thank you!

1 Like
#17

May i can ask if i can do a redirect if the ip is not in whitelist?

#18

I don’t think the WAF can accommodate that, based on what I see, but someone else here might have a way.

#19

But in other my subdomain (or the main) give me a error (1020) i need to setup other connections?

#20

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.