In my last post I talked about how to automatically add IP blocks to CloudFlare from your own server. I also talked about the problem that could lead to, which is potentially 1000s of IP blocks mounting up over time (leading to firewall performance issues, and hitting your CloudFlare IP block limit). I mulled over the best solution to this … Read More
Automatically Adding ConfigServer Firewall (CSF) Firewall Blocks to CloudFlare
Unfortunately, having mod_cloudflare installed on ones server does not mean that the server’s front-end firewall (ConfigServer Firewall in one instance for me) sees the correct remote IP address for requests routed via CloudFlare. It appears mod_cloudflare (which is after all an Apache ‘mod’) works great for applications querying the REMOTE_ADDR server value from within Apache, but in many cases the … Read More
Automatically Adding IP Addresses to ConfigServer Firewall
A website I manage has recently been targeted with a DDoS (Distributed Denial Of Service Attack). The PHP code on the site was already logging access (as is normal) but I wanted a simple way to respond to excessive access from any particular IP other than using a coded denial of response in the website’s code because while this does … Read More