News for hackers. Stuff that matters.

A comment on Ask HN: Why is my web server being attacked?. Parent comment

Re:Ask HN: Why is my web server being attacked? by codegeek on Wednesday December 27, 2023 @02:41PM (#38785710)
Cloudflare won't protect your IP being hit directly. If your IP can be accessed publicly, it will get hit. period. You could use nginx etc to do a 444 status code but can't stop these scripts/bots from hitting ur IP completely.
[ Parent | on HN ]
Re:Ask HN: Why is my web server being attacked? by lormayna on Wednesday December 27, 2023 @03:32PM (#38786375)
Yes and no. If you have an iptables rule that drop anything not coming from CF IPs, the attacking packets are not passed to the application and dropped in kernel mode. Otherwise the packet will be passed to user mode application that consume more resources to analyse and drop the connection.
[ Parent | on HN ]
Re:Ask HN: Why is my web server being attacked? by solardev on Wednesday December 27, 2023 @03:21PM (#38786235)
Normally you'd just configure the firewall to drop all packets not from Cloudflare. Maybe also get a new static IP first.
[ Parent | on HN ]
Re:Ask HN: Why is my web server being attacked? by dizhn on Wednesday December 27, 2023 @10:48PM (#38789809)
Is there a different set of IPs for Warp? That would have to be denied too.
[ Parent | on HN ]
Re:Ask HN: Why is my web server being attacked? by kkielhofner on Wednesday December 27, 2023 @09:21PM (#38789256)
Cloudflare tunnels:

https://www.cloudflare.com/products/tunnel/

I haven’t had anything exposed to the Internet in a long while.

[ Parent | on HN ]