Question Managing traffic by cloudflare

[CL4Y]

Hello, I didn't know how to find a title. For this reason, I want to explain briefly, I put an ip restriction for ports 8443 and 8880 of the plesk server. It could only be accessed with extra ip, so I wanted to return all traffic through proxy because I use cloudflare. There is no access to port 80 and 443 from normal ip. I wonder if the settings in the image are correct?

 

[Sebahat.hadzhi]

Hello, @CL4Y . Could you please execute the following command and confirm if you get an output such as filtered or closed:

nmap YOUR-SERVER-IP -p80,443

 

[CL4Y]

Hello, @Sebahat.hadzhi

When I make an inquiry, I get filtered response.

 

[Sebahat.hadzhi]

Please try running the following command:

iptables -I INPUT -p tcp -m multiport --port 80,443 -j ACCEPT

If after that the output is still filtered, please double-check with the server provider if there is additional firewall applied on their end.

 

[CL4Y]

If after that the output is still filtered, please double-check with the server provider if there is additional firewall applied on their end.

Actually, wouldn't it work for me if it was filtered? I gave access directly to cloudflare ip addresses. I transfer all traffic through cloudflare.

 

[Sebahat.hadzhi]

If the said firewall is set to only allow Cloudflare IPs on 80/443, then all other IPs (including the one you tested from) would see those ports as filtered.

 

[CL4Y]

If the said firewall is set to only allow Cloudflare IPs on 80/443, then all other IPs (including the one you tested from) would see those ports as filtered.

Yes, filtered. then it works the way I want it to, right? I already use cloudflare clouds actively on all my sites.

 

[Sebahat.hadzhi]

There is no access to port 80 and 443 from normal ip.

Sorry, I might have completely misunderstood your inquiry. Regarding the above statement - is that a requirement in your setup or this is an issue you are experiencing?

 

[CL4Y]

Sorry, I might have completely misunderstood your inquiry. Regarding the above statement - is that a requirement in your setup or this is an issue you are experiencing?

I may have misrepresented myself. Actually, my goal is that I don't want to have access from the normal IP. According to the firewall rules I made, access will be completely available only through cloudflare, right? Which already has access via cloudflare when we provide control.

My goal is to completely close normal access and route/manage all traffic through cloudflare.

 

[Sebahat.hadzhi]

I see. Apologies for the misunderstanding. If you want to allow traffic to ports 80, 443, 8880, and 8443 only through Cloudflare IP addresses, the setup looks fine to me.

 

[CL4Y]

I see. Apologies for the misunderstanding. If you want to allow traffic to ports 80, 443, 8880, and 8443 only through Cloudflare IP addresses, the setup looks fine to me.

Thank you very much for your help.