stu_m Posted January 30, 2022 Share Posted January 30, 2022 I am thinking of using cloudflare but I have one question When I used to use it on my phpBB forum the IP address of all users was the same and I had to install a modification which showed the origin IP address Does IPS show the origin IP of users or will it be the cloudflare one thats proxied? Link to comment Share on other sites More sharing options...
rnorth6920 Posted January 30, 2022 Share Posted January 30, 2022 (edited) We use cloudflare on our site and IPS does show the IP of your users. Edited January 30, 2022 by rnorth6920 Chris027, stu_m and SeNioR- 2 1 Link to comment Share on other sites More sharing options...
stu_m Posted January 30, 2022 Author Share Posted January 30, 2022 Thanks @rnorth6920 I am having a lot of issues with spam and spam defence seems to be doing nothing so time to go the cloudflare route and use another layer of security Link to comment Share on other sites More sharing options...
IveLeft... Posted January 30, 2022 Share Posted January 30, 2022 2 hours ago, stu_m said: Thanks @rnorth6920 I am having a lot of issues with spam and spam defence seems to be doing nothing so time to go the cloudflare route and use another layer of security There are other things you can do to stop spam (depending what type of spam) apart from Cloudflare - which I have never used for spam defence I must admit Link to comment Share on other sites More sharing options...
Randy Calvert Posted January 30, 2022 Share Posted January 30, 2022 The CleanTalk anti spam plugin in the marketplace is 8 bucks a year, but has been very good at helping prevent spam registrations AND contact us spam messages. It’s not perfect but has reduced spam by around 90% for my community. stu_m, SeNioR- and Greek76 3 Link to comment Share on other sites More sharing options...
IveLeft... Posted January 31, 2022 Share Posted January 31, 2022 If your running CSF firewall then you can enable the stopforumspam IPs in /etc/csf/csf.blocklists by removing (un commenting) the # behind the last line of each block # Stop Forum Spam # Details: http://www.stopforumspam.com/downloads/ # Many of the lists available contain a vast number of IP addresses so special # care needs to be made when selecting from their lists STOPFORUMSPAM|86400|0|http://www.stopforumspam.com/downloads/listed_ip_1.zip # Stop Forum Spam IPv6 # Details: http://www.stopforumspam.com/downloads/ # Many of the lists available contain a vast number of IP addresses so special # care needs to be made when selecting from their lists STOPFORUMSPAMV6|86400|0|http://www.stopforumspam.com/downloads/listed_ip_1_ipv6.zip AlexWebsites, AlexJ, SeNioR- and 1 other 3 1 Link to comment Share on other sites More sharing options...
Solution Marc Stridgen Posted January 31, 2022 Solution Share Posted January 31, 2022 You would need to ask cloudflare the question you are actually asking there, how to switch that off. Its not something controlled by our software. You can switch on "Trust IP Addresses provided by proxies" if you do have that issue though. This is in System->Settings->Advanced Configuration Before doing any of this though, I would highly advise on ensuring you are using all the built in methods of protection. You don't appear to be using all methods shown. SeNioR- 1 Link to comment Share on other sites More sharing options...
stu_m Posted January 31, 2022 Author Share Posted January 31, 2022 12 hours ago, Muddy Boots said: If your running CSF firewall then you can enable the stopforumspam IPs in /etc/csf/csf.blocklists by removing (un commenting) the # behind the last line of each block # Stop Forum Spam # Details: http://www.stopforumspam.com/downloads/ # Many of the lists available contain a vast number of IP addresses so special # care needs to be made when selecting from their lists STOPFORUMSPAM|86400|0|http://www.stopforumspam.com/downloads/listed_ip_1.zip # Stop Forum Spam IPv6 # Details: http://www.stopforumspam.com/downloads/ # Many of the lists available contain a vast number of IP addresses so special # care needs to be made when selecting from their lists STOPFORUMSPAMV6|86400|0|http://www.stopforumspam.com/downloads/listed_ip_1_ipv6.zip I never knew about this!! I am going to give this a go and see how it goes 9 hours ago, Marc Stridgen said: You would need to ask cloudflare the question you are actually asking there, how to switch that off. Its not something controlled by our software. You can switch on "Trust IP Addresses provided by proxies" if you do have that issue though. This is in System->Settings->Advanced Configuration Before doing any of this though, I would highly advise on ensuring you are using all the built in methods of protection. You don't appear to be using all methods shown. I don't use all methods as users get annoyed with having to try and jump through hoops to join a forum and if they don't get it all right they get fed up and don't bother Ricsca 1 Link to comment Share on other sites More sharing options...
IveLeft... Posted January 31, 2022 Share Posted January 31, 2022 2 minutes ago, stu_m said: I never knew about this!! I am going to give this a go and see how it goes Once you have edited the block list you need to restart csf csf -r Link to comment Share on other sites More sharing options...
stu_m Posted January 31, 2022 Author Share Posted January 31, 2022 2 minutes ago, Muddy Boots said: Once you have edited the block list you need to restart csf csf -r Yup all done I am editing through WHM so it automatically prompts you to restart Link to comment Share on other sites More sharing options...
stu_m Posted January 31, 2022 Author Share Posted January 31, 2022 10 hours ago, Marc Stridgen said: You would need to ask cloudflare the question you are actually asking there, how to switch that off. Its not something controlled by our software. You can switch on "Trust IP Addresses provided by proxies" if you do have that issue though. This is in System->Settings->Advanced Configuration Before doing any of this though, I would highly advise on ensuring you are using all the built in methods of protection. You don't appear to be using all methods shown. Not sure why this was marked as the solution as its not! The question was if the software displays the real users IP address rather than the cloudflares IP address and it does as others have confirmed Link to comment Share on other sites More sharing options...
Jim M Posted January 31, 2022 Share Posted January 31, 2022 2 minutes ago, stu_m said: Not sure why this was marked as the solution as its not! The question was if the software displays the real users IP address rather than the cloudflares IP address and it does as others have confirmed Turning on the "Trust IP Addresses provided by proxies" would enable it to show the real users IP address. So it is the answer to obtaining the real user's IP address. stu_m 1 Link to comment Share on other sites More sharing options...
Marc Stridgen Posted February 1, 2022 Share Posted February 1, 2022 10 hours ago, stu_m said: Not sure why this was marked as the solution as its not! The question was if the software displays the real users IP address rather than the cloudflares IP address and it does as others have confirmed It is indeed the answer to your question there. As mentioned by Jim, it allows you to correct it if cloudflare is sending it incorrectly. We cant answer as to what cloudflare is actually sending though, just to clarify that part Link to comment Share on other sites More sharing options...
Greek76 Posted February 1, 2022 Share Posted February 1, 2022 On 1/30/2022 at 5:24 PM, Randy Calvert said: The CleanTalk anti spam plugin in the marketplace is 8 bucks a year, but has been very good at helping prevent spam registrations AND contact us spam messages. It’s not perfect but has reduced spam by around 90% for my community. I second this. Clean Talk works great against spam. Link to comment Share on other sites More sharing options...
Chris027 Posted February 3, 2022 Share Posted February 3, 2022 I've used Cloudflare for years with IPS. Love it. However, I can't imagine using it for anything SPAM related. The built-in IPS tools, with some wise user/group setup, are almost perfect. I used to get thousands of SPAM per day. Now I know get about ten and they all come via the Contact Us form. If I could block all URLs in this form, life would be good. q p and Marc Stridgen 1 1 Link to comment Share on other sites More sharing options...
.thumb.png.72c24494603afd7a572d55d4a71e4af2.png)
Recommended Posts