Will this plugin block Cloudflare IPs?

  • Hello,

    I have setup firewall for my server that only allows Cloudflare IPs to go thur, I wonder if this plugin will block Cloudflare traffic. I do experience some kind of traffic drop since I have setup that firewall.

    Do you know how can I prevent that from happening if this may be true

    I saw there are 82 ips blocked under the Permanent Block List, I dont know how this plugin autmoatically blocks ip, all under reason of spam, but I use disqus, I dont need to worry about spam, can you tell me how this happen and how to stop it?

    • This topic was modified 7 years, 4 months ago by davikk.
Viewing 7 replies - 1 through 7 (of 7 total)
  • Thread Starter davikk

    (@davikk)

    …

    • This reply was modified 7 years, 4 months ago by davikk.
    Plugin Contributor wpsolutions

    (@wpsolutions)

    If those IP addresses in the aiowps_permanent_block table all have block_reason = “spam” then it is a good chance they are blocked legitimately because the code checks if the number of comments that IP address added exceeds the setting threshold of comments marked as “spam”.

    Having said that, I am not 100% familiar with the cloudflare IP handling so I’m not sure what they do with an IP address when it enters their network and pass it on to you.

    I do experience some kind of traffic drop since I have setup that firewall

    Have you tried some tests by disabling only the firewall rules to see if there is any change in the traffic pattern?

    Thread Starter davikk

    (@davikk)

    Under the firewall rules, I only choose the ones that protecting my important files access so I don’t worry, but still if you can test the compatibility of clouflare that would be great for the plugin.

    I will test it for myself. Is there anything outside of firewall rules from this plugin will also block ip address?

    Plugin Contributor wpsolutions

    (@wpsolutions)

    Is there anything outside of firewall rules from this plugin will also block ip address?

    Yes – the spam autoblock functionality does not use .htaccess firewall rules. It checks for IPs that are used to post comments which are marked as “spam” either by Akismet or manually by the admin of the site and if the same IP address has more than the allowed amount of “spam” comments, it will be blocked.

    Thread Starter davikk

    (@davikk)

    Thanks for the heads up, after I remove the blocked ups, I have disabled that function for blocking the ips automatically after 3 times posting spam comments.

    Thanks.

    Update

    Today I found about 500 blocked IPs. Access from these IPs was requested for a nonexistent login page wp-login. Obviously, access was requested by attackers.

    But…

    Most of the requests come from the CloudFlare IP…

    Some plugins, for example WP Cerber, have the ability to customize this. Put only one tick in the checkbox. And after that, the system displays the actual IP of the requests.

    How i can do it in All In One WP Security? Because i have Cloudflare – they help me from DD0S attack also.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi @advertino, can you start a new support thread.

    Thank you

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Will this plugin block Cloudflare IPs?’ is closed to new replies.