New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Using CloudFlare DNS results in all user IPs being CloudFlare based
I have a site running mybb which is using CloudFlare DNS. Problem is all users coming to site are showing CloudFlare IP no matter which country/region are they from. Is this normal?
I mean if you use CloudFlare protection, it means you will not be able to see real IPs of users coming to your site and all you will see are different CloudFlare IPs?
Comments
That's the way a proxy-style filter works.
Take a look at the following:
https://support.cloudflare.com/hc/en-us/sections/200805497-Restoring-Visitor-IPs
You should be able to configure your webserver to restore the actual user's IP address using the HTTP headers.
See: https://support.cloudflare.com/hc/en-us/sections/200805497-Restoring-Visitor-IPs
edit: Damn @Aidan, you're too quick for me.
Wow didn't know that.
This is a new forum and a couple of days ago I saw 5, 6 new signups all from Russia having .ru email address (they are all bots/spammers) but when I checked their IP, it was pointing to CloudFlare so I thought that may be they are from within CloudFlare network i.e. they might be working there haha
But today I noticed my own IP is CloudFlare that's when I knew something is wrong.
I use it in my code:
UGH.
There are so many reasons why not to blindly trust a server global.
Or PHP.
Yes but its work I have simple use case using it. Only allow Google robot to crawl the site by using some kind of trap. If any robot follow the hidden link, check the header, if it said "google" than check the IP again arin, ripe etc. if yes it Google than let him pass.
What's that do to page load time? 30, 40 seconds?
Less than 1 second actually credit to this https://perishablepress.com/blackhole-bad-bots/ I just improve the codes for my own use case.
Just visit the demo page to see the page load.
I updated my nginx.conf and it worked. I can see real IPs in mybb forum now.
you can do that a lot more efficient https://support.google.com/webmasters/answer/80553?hl=en
Install https://www.cloudflare.com/technical-resources/#mod_cloudflare and it will show real ips.
Yes noticed about that earlier. Planning to block DMCA bot either