2

I have a question, I use cloudflare DNS on my domain. My VPS 30.xxx.xxx.xxx.xx Port 4490

My VPS Ip was filtered by crawler web pages, and I am getting bots hitting my server.

I am thinking of buying a new VPS and adding a protection that only allows cloudflare and denying all IPs.

I was reading the cloudflare documentation.

They recommend me these options to add IPTABLES on my server

Allow only cloudflare

https://developers.cloudflare.com/fundamentals/get-started/setup/allow-cloudflare-ip-addresses/#allowlist-cloudflare-ip-addresses

deny everything else

https://developers.cloudflare.com/fundamentals/get-started/setup/allow-cloudflare-ip-addresses/#block-other-ip-addresses-recommended

Iptable blocked

https://www.linode.com/docs/guides/control-network-traffic-with-iptables/#block-or-allow-traffic-by-port-number-to-create-an-iptables-firewall

The question I have is if I do these steps, will I have any problem accessing my SSH through my IP?

What I care is that I can access my SSH, and that all my visit is only allowed by cloudflare, everything else related to the Ip that is blocked for the visitor, bots or crawler.

1
  • You should not require us reading your question to also have to browse your three links. While keeping the links, you should copy what's relevant from these links directly into your question, probably using quote blocks.
    – A.B
    Sep 24, 2022 at 17:58

1 Answer 1

1

You need to add your own IP address to the allowed IP addresses.

Another alternative is to set up mutual TLS authentication, where anyone wishing to connect to your webserver needs to have a client certificate. https://developers.cloudflare.com/ssl/origin-configuration/authenticated-origin-pull/ tells how to implement this with Cloudflare.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .