Question Managing traffic by cloudflare

[CL4Y]

Hello, I didn't know how to find a title. For this reason, I want to explain briefly, I put an ip restriction for ports 8443 and 8880 of the plesk server. It could only be accessed with extra ip, so I wanted to return all traffic through proxy because I use cloudflare. There is no access to port 80 and 443 from normal ip. I wonder if the settings in the image are correct?

 

[Sebahat.hadzhi]

Hello, @CL4Y . Could you please execute the following command and confirm if you get an output such as filtered or closed:

nmap YOUR-SERVER-IP -p80,443

 

[CL4Y]

Hello, @Sebahat.hadzhi

When I make an inquiry, I get filtered response.

 

[Sebahat.hadzhi]

Please try running the following command:

iptables -I INPUT -p tcp -m multiport --port 80,443 -j ACCEPT

If after that the output is still filtered, please double-check with the server provider if there is additional firewall applied on their end.

 

[CL4Y]

If after that the output is still filtered, please double-check with the server provider if there is additional firewall applied on their end.

Actually, wouldn't it work for me if it was filtered? I gave access directly to cloudflare ip addresses. I transfer all traffic through cloudflare.

 

[Sebahat.hadzhi]

If the said firewall is set to only allow Cloudflare IPs on 80/443, then all other IPs (including the one you tested from) would see those ports as filtered.

 

[CL4Y]

If the said firewall is set to only allow Cloudflare IPs on 80/443, then all other IPs (including the one you tested from) would see those ports as filtered.

Yes, filtered. then it works the way I want it to, right? I already use cloudflare clouds actively on all my sites.

 

[Sebahat.hadzhi]

There is no access to port 80 and 443 from normal ip.

Sorry, I might have completely misunderstood your inquiry. Regarding the above statement - is that a requirement in your setup or this is an issue you are experiencing?

 

[CL4Y]

Sorry, I might have completely misunderstood your inquiry. Regarding the above statement - is that a requirement in your setup or this is an issue you are experiencing?

I may have misrepresented myself. Actually, my goal is that I don't want to have access from the normal IP. According to the firewall rules I made, access will be completely available only through cloudflare, right? Which already has access via cloudflare when we provide control.

My goal is to completely close normal access and route/manage all traffic through cloudflare.