Cloudflare

[stu_m]

I am thinking of using cloudflare but I have one question 

When I used to use it on my phpBB forum the IP address of all users was the same and I had to install a modification which showed the origin IP address 

Does IPS show the origin IP of users or will it be the cloudflare one thats proxied? 

[rnorth6920]

We use cloudflare on our site and IPS does show the IP of your users.  

Edited January 30, 2022 by rnorth6920

[stu_m]

Thanks @rnorth6920 

 

I am having a lot of issues with spam and spam defence seems to be doing nothing so time to go the cloudflare route and use another layer of security 

[IveLeft...]

2 hours ago, stu_m said:

Thanks @rnorth6920 

 

I am having a lot of issues with spam and spam defence seems to be doing nothing so time to go the cloudflare route and use another layer of security 

There are other things you can do to stop spam (depending what type of spam) apart from Cloudflare - which I have never used for spam defence I must admit 

[Randy Calvert]

The CleanTalk anti spam plugin in the marketplace is 8 bucks a year, but has been very good at helping prevent spam registrations AND contact us spam messages. 

It’s not perfect but has reduced spam by around 90% for my community. 

[IveLeft...]

If your running CSF firewall then you can enable the stopforumspam IPs in 

/etc/csf/csf.blocklists by removing (un commenting) the # behind the last line of each block

# Stop Forum Spam
# Details: http://www.stopforumspam.com/downloads/
# Many of the lists available contain a vast number of IP addresses so special
# care needs to be made when selecting from their lists
STOPFORUMSPAM|86400|0|http://www.stopforumspam.com/downloads/listed_ip_1.zip

# Stop Forum Spam IPv6
# Details: http://www.stopforumspam.com/downloads/
# Many of the lists available contain a vast number of IP addresses so special
# care needs to be made when selecting from their lists
STOPFORUMSPAMV6|86400|0|http://www.stopforumspam.com/downloads/listed_ip_1_ipv6.zip

 

[Marc]

You would need to ask cloudflare the question  you are actually asking there, how to switch that off. Its not something controlled by our software. You can switch on "Trust IP Addresses provided by proxies" if you do have that issue though. This is in System->Settings->Advanced Configuration

Before doing any of this though, I would highly advise on ensuring you are using all the built in methods of protection. You don't appear to be using all methods shown. 

 

[stu_m]

12 hours ago, Muddy Boots said:

If your running CSF firewall then you can enable the stopforumspam IPs in 

/etc/csf/csf.blocklists by removing (un commenting) the # behind the last line of each block

# Stop Forum Spam
# Details: http://www.stopforumspam.com/downloads/
# Many of the lists available contain a vast number of IP addresses so special
# care needs to be made when selecting from their lists
STOPFORUMSPAM|86400|0|http://www.stopforumspam.com/downloads/listed_ip_1.zip

# Stop Forum Spam IPv6
# Details: http://www.stopforumspam.com/downloads/
# Many of the lists available contain a vast number of IP addresses so special
# care needs to be made when selecting from their lists
STOPFORUMSPAMV6|86400|0|http://www.stopforumspam.com/downloads/listed_ip_1_ipv6.zip

 

I never knew about this!! 

I am going to give this a go and see how it goes 

 

9 hours ago, Marc Stridgen said:

You would need to ask cloudflare the question  you are actually asking there, how to switch that off. Its not something controlled by our software. You can switch on "Trust IP Addresses provided by proxies" if you do have that issue though. This is in System->Settings->Advanced Configuration

Before doing any of this though, I would highly advise on ensuring you are using all the built in methods of protection. You don't appear to be using all methods shown. 

 

 

I don't use all methods as users get annoyed with having to try and jump through hoops to join a forum and if they don't get it all right they get fed up and don't bother 

[IveLeft...]

2 minutes ago, stu_m said:

I never knew about this!! 

I am going to give this a go and see how it goes

Once you have edited the block list you need to restart csf

csf -r

 

[stu_m]

2 minutes ago, Muddy Boots said:

Once you have edited the block list you need to restart csf

csf -r

 

Yup all done 

I am editing through WHM so it automatically prompts you to restart 

[stu_m]

10 hours ago, Marc Stridgen said:

You would need to ask cloudflare the question  you are actually asking there, how to switch that off. Its not something controlled by our software. You can switch on "Trust IP Addresses provided by proxies" if you do have that issue though. This is in System->Settings->Advanced Configuration

Before doing any of this though, I would highly advise on ensuring you are using all the built in methods of protection. You don't appear to be using all methods shown. 

 

 

Not sure why this was marked as the solution as its not! 

The question was if the software displays the real users IP address rather than the cloudflares IP address and it does as others have confirmed 

[Jim M]

2 minutes ago, stu_m said:

 

Not sure why this was marked as the solution as its not! 

The question was if the software displays the real users IP address rather than the cloudflares IP address and it does as others have confirmed 

Turning on the "Trust IP Addresses provided by proxies" would enable it to show the real users IP address. So it is the answer to obtaining the real user's IP address.

[Marc]

10 hours ago, stu_m said:

 

Not sure why this was marked as the solution as its not! 

The question was if the software displays the real users IP address rather than the cloudflares IP address and it does as others have confirmed 

It is indeed the answer to your question there. As mentioned by Jim, it allows you to correct it if cloudflare is sending it incorrectly. We cant answer as to what cloudflare is actually sending though, just to clarify that part

[Greek76]

On 1/30/2022 at 5:24 PM, Randy Calvert said:

The CleanTalk anti spam plugin in the marketplace is 8 bucks a year, but has been very good at helping prevent spam registrations AND contact us spam messages. 

It’s not perfect but has reduced spam by around 90% for my community. 

I second this. Clean Talk works great against spam. 

[Chris027]

I've used Cloudflare for years with IPS. Love it. However, I can't imagine using it for anything SPAM related. The built-in IPS tools, with some wise user/group setup, are almost perfect. 

I used to get thousands of SPAM per day. Now I know get about ten and they all come via the Contact Us form. If I could block all URLs in this form, life would be good.