IPs not forwarded from CloudFlare

[Drewlzoo]

I made a range block to 173.245.48.0/20 yesterday, because that range belongs to CloudFlare, the company that's we've been getting all the spambots from. It stopped the spambots, but I just noticed today that it's now saying that my IP is different than what it is, and including it in that range. This is only on Brickimedia, everywhere else I check says my IP is normal. I can still edit when logged in, but I'm blocked as soon as I log out.

[adamrobcarter]

hmm. CloudFlare shouldn't be spamming... All Brickimedia traffic (not sure if you know this) goes through cloudflare servers, which should speed things up, and provide a backup if the site is down temporarily. I'm wondering if blocking the cloudflare IPs also blocks other traffic coming in through cloudflare or something...

[SirComputer1]

CloudFlare probably masks your IP and changes it to one of them... idiotically.

[Drewlzoo]

Ohhh, that makes sense. I had wondered if Brickimedia used CloudFlare, but
I never thought that'd be why.

So if CloudFlare is converting all of the IP addresses going into the site,
how do we block spambots? I'm all for making things load faster, but if
it's actually changing people's IPs when they're using the site, then maybe
we shouldn't be using it.

It did seem really odd to me that all of the spambots were using CloudFlare
IPs. I'll go undo to other range block I made.
On Nov 7, 2013 2:58 PM, "Oliver" notifications@github.com wrote:

CloudFlare probably masks your IP and changes it to one of them...
idiotically.

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/63#issuecomment-28000593
.

[Drewlzoo]

I just CheckUser'd myself, and found that I had the same IP as some other users. If we keep this, we'd have to get rid of all forms of IP blocks. Is there some way we can keep CloudFlare, but get rid of the IP converting feature thingy?

[MtMNC]

I found something on the CloudFlare website about this: https://support.cloudflare.com/hc/en-us/articles/200170786

It looks like you can resolve this issue with something called mod_cloudflare. It's explained in the top section of this page: http://www.cloudflare.com/resources-downloads

[adamrobcarter]

Only problem is that that is an apache mod, and we're running nginx at the moment.

[adamrobcarter]

Hmm, there is a mediawiki mod, but that is only for 1.18 and earlier, and we're on 1.20 currently. here

[adamrobcarter]

Ah, but there's a nginx mod here. It needs a recompile of nginx though. Perhaps @lewiscawte would know more about how to do this?

[georgebarnick]

From what Lewis and I can tell, this has been resolved. The nginx configuration has been updated in /sites-enabled/*.brickimedia.org, but not /sites-enabled/*.develop.brickimedia.org.