Wordfence and Cloudflare’s IPs

  • Resolved Christoph

    (@camthor)


    5 years, 4 months ago

    Hi,

    I am using Cloudflare together with Wordfence and I am intermittently experiencing issues to access my site. I am now wondering if the reason might be that Wordfence is sometimes blocking IPs of Cloudflare.

    So, if any attack happens, is Wordfence able to distinguish between the original IPs of attackers and “good visitors”, or does it just see Cloudflare’s IPs and therefore blocks all traffic?

    Thank you!

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter Christoph

    (@camthor)

    5 years, 4 months ago

    I discovered now the setting “How does Wordfence get IPs” where I can select “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.”. I’ll try that now. 🙂

    wfdave

    (@wfdave)

    5 years, 4 months ago

    Hi @camthor,

    Glad to hear that it’s working now! What was happening is that Cloudflare is acting as a medium for your user’s connections. This causes Wordfence to quickly block Cloudflare’s IP address because it’s connecting too frequently/rapidly to your server.

    By changing how Wordfence gets IPs, Wordfence will now use a special HTTP header that Cloudflare supplies indicating that the connection is actually form a different IP address.

    Dave

    TheGreyRabbit

    (@ayo-1)

    5 years, 2 months ago

    Hey @wfdave ,

    I’m using the same setting, together with Cloudflare: Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.
    In section Tools > Diagnostics > the CF-Connecting-IP value is not set. Configured but not valid.
    How can I fix this?

    Thanks

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Wordfence and Cloudflare’s IPs’ is closed to new replies.