Trafic Inspector IP recognition

  • Hello, this promissing plugin is installed aloong with wordfence and there is cloudflare CDN AS front. Wordfence has several options to retrieve the correct IP. I am using the X-Forwarded-For HTTP header Or the Cloudflare “CF-Connecting-IP , both of these work correctly for my setup. In contrast retrieving methods like X-Real-IP HTTP header or PHP’s built in REMOTE_ADDR won’t work and they both report cloudflare white list IP. Please note that auto method for IP detection fails for wordfence.

    I have whitelisted cloudflare and other IPs with Cerber. However, in the livetrafic logs, I can see that whitelisted cloudflare IPs , are reported when a blocked attempt like scanning or failed login is shown , or when I check the IPs currently logged in. Before accusing cloudflare personel for anything, it would be nice to have those options or any related hack or configuration for Cerber, in order to make sure it reports the correct real IP for each connection.
    I don’t know the execution of hooks and which plug in checks first, both are with default legacy settings for loading, if that amounts to any importance for the case. Do you know any solution?

    Regards.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author gioni

    (@gioni)

    Hi! WP Cerber has a solution that covers all possible situations. Please see step #1 here https://wpcerber.com/getting-started/

    WP Cerber has a solution that covers all possible situations.

    I looked at the instructions and already checked the “behind reverse proxy” option in the plug-in options. I’ve also inspected the HTTP_X_REAL_IP I get from the Cerber diagnostics and it’s 10.42.2.2 which is the same as the REMOTE_ADDR and that’s incorrect as that’s internal DNS stuff and not the actual IP address of my connecting client. In my case I’m not using a CDN at the moment. I’m running Cerber inside a Kubernetes cluster. What should I try next?

    Plugin Author gioni

    (@gioni)

    If you do not see real IP addresses on the Diagnostic tab in the “Server Environment Variables” section, your web server is misconfigured. Read more: https://wpcerber.com/wordpress-ip-address-detection/

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Trafic Inspector IP recognition’ is closed to new replies.