Hide real IP behind CloudFlare DNS

[stewart]

Hello Friends,

I have CloudFlare's business plan on my site but apparently attacks are coming directly to the actual IP of the VPS Bypassing CloudFlare. What proceeds in these cases so that the IP is never visible?

I'll be investigating, Regards.

[Larry]

If the server has been exposed for a long time, the attackers would have your IP and would give you a little equal. To avoid exposing the IP, make sure you do not have any domain / subdomain that points directly to the server. Also if you have a configured mail server you probably have SPF headers with the IP or host so they will not be filtered by the anti-spam filters. You would have to use a separate mail server.

On the other hand, once configured CloudFlare, I recommend that you do DROP to all traffic that does not come from your IP's. That is, an exclusive whitelist to these:

Code:

https://www.cloudflare.com/ips/
(Or https://www.cloudflare.com/ips-v6 and https://www.cloudflare.com/ips-v4 if you prefer to update them using scripts)  

regards

[stewart]

Thanks for the quick reply

[aspirationhosting]

Upvote on that.  Also, you should contact CloudFlare for some additional suggestions.  Perhaps change the IP so the old IP is obsolete.