ConfigServer Community Forum

You were right, needed to ask CloudFlare. They have it covered:

https://support.cloudflare.com/hc/en-us ... he-cPanel-

TY!

Excellent, tried it, it works! Thank you. But to make it fully automatic I will need to automate the restart. Do you know of a way in PHP to initiate a restart of CFS and LFD without resorting to PHP commands 'system' or 'exec' which are disabled on my server. I could simply set up a cron task to ru...

CloudFlare say they do send the original IP address in the headers under parameter "CF-Connecting-IP". Is there some way to modify my environment such that the REMOTE_ADDR (assuming that's what CFS and LFD look at) is modified to hold the value of CF-Connecting-IP if that latter parameter ...

Google searching discovered this way to retrieve the _current_ Google IP ranges: nslookup -q=TXT _spf.google.com 8.8.8.8 This returns a list of the domains included in Google's SPF record, such as: _netblocks.google.com, _netblocks2.google.com, _netblocks3.google.com Now look up the DNS records asso...

Because much of my server's traffic is coming through CloudFlare, and I've whitelisted CloudFlare's IP addresses, have I rendered CSF and LFD less effective at blocking repeat attacks from the same IP?

Is there a way around this other than by taking CloudFlare out of the equation?

TY

Brill. TY.

ie. I have not set this line anywhere:

SecUploadKeepFiles RelevantOnly

Should I?

TY!!

Ah OK. Thank you.

So if I use your vendor rules, do I not need to worry about the setting change for cxs/modsec 2.9 compatibility at all?

Thank you for your recent Tweet regarding cxs and ModSecurity v2.9. I have tried to edit /usr/local/apache/conf/modsec2.user.conf As detailed in your blog post: http://blog.configserver.com/?p=2522 However I see currently no mention of CXS in the configuration file: "and add the line above afte...

Due to a lot of distributed SMTP auth attacks I used the advanced EXIM editor as outlined in the readme.txt file for CSF/LFD. Worked like a charm, thank you! But now Google has decided if you wish to 'send mail as' another address than the Google account's own - you have to provide Google direct SMT...