Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can the ddos-deflate script prevent banning good Cloudflare IPs (are there such IPs)? #64

Closed
slrslr opened this issue Jun 2, 2019 · 1 comment

Comments

@slrslr
Copy link

slrslr commented Jun 2, 2019

Hello, i used different version of the ddos-deflate and it blocked cloudflare's IP

I see this version is having some cloudflare feature, but i do not know if it would be effective.

Numerous of the hosted sites are using cloudflare. This is Apache + Cachewall with utilize Varnish cache + cloudflare_module

Next thing i want to ask is if it is correct the cloudflare IPs be blocked (that blocked IP shown roughly 3 hundred connections).

I tried to add CF IP ranges in CIDR format into ignore list, but that not worked for the script to match the IPs to the subnet: Amet13/ddos-deflate#4

@jgmdev
Copy link
Owner

jgmdev commented Jun 3, 2019

I implemented the cloudfare support by using iptables string matching to retrieve the real ip of users given by the cloudflare header value. The implementation details where discussed on #59

Also CIDR syntax is supported on this fork of ddos-deflate thanks to grepcidr which was contributed by someone else who knew about it.

@jgmdev jgmdev closed this as completed Jun 6, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants