Skip to content

Instantly share code, notes, and snippets.

@jhoelzel

jhoelzel/gist:1c015e667c162fc8f3f3712b1c6417c5

Created September 28, 2021 15:49
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save jhoelzel/1c015e667c162fc8f3f3712b1c6417c5 to your computer and use it in GitHub Desktop.
Save jhoelzel/1c015e667c162fc8f3f3712b1c6417c5 to your computer and use it in GitHub Desktop.
Download ZIP
iptables / ip6tables allow only cloudflare IPs to acces our server
Raw
gistfile1.txt
# https://www.cloudflare.com/ips
# https://support.cloudflare.com/hc/en-us/articles/200169166-How-do-I-whitelist-CloudFlare-s-IP-addresses-in-iptables-
for i in `curl https://www.cloudflare.com/ips-v4`; do iptables -I INPUT -p tcp -m multiport --dports http,https -s $i -j ACCEPT; done
for i in `curl https://www.cloudflare.com/ips-v6`; do ip6tables -I INPUT -p tcp -m multiport --dports http,https -s $i -j ACCEPT; done
@jhoelzel
Copy link
Author

to drop the traffic at a later time:
iptables -A INPUT -p tcp -m multiport --dports http,https -j DROP
ip6tables -A INPUT -p tcp -m multiport --dports http,https -j DROP

@etherx-dev
Copy link

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment