Cloudflare IP Instead of Users
-
Cloudflare sends the actual users IP address in an X-Forwarded-For, or HTTP_CF-Connecting-IP Headers.
Even with the Cloudflare Plugin installed (which is supposed to unmask a users IP), iThemes still see’s only the Cloudflare IP. This means if one user hits any of the criteria for blacklisting/blocking, all of cloudflare users originating from that IP go down the tubes as well.
Has anyone found a work around with the plugin to prevent this? I like iThemes Security, but I also really like Cloudflare, and it would be awesome if the two could play nice together.
In fact, cloud flare allows third parties to report potential threats to them to be used to help protect other sites!
In the mean time, has anyone else come across this? Have you found a solution around it?
- The topic ‘Cloudflare IP Instead of Users’ is closed to new replies.
