Automatically whitelist Cloudflare IPs with UFW and get an easier way to delete old rules
License: MIT License
I'm Drago, I create random and sometimes useful things in PHP, JS and/or other languages.
🐘 Currently I work at @brooktec as a #PHP and #Wordpress developer.
🌈 I create random themes: (minimal-block)
👨💻 I'm a security enthusiast: (ufw-cloudflare, cloudflare-scan)
script does not add all ip addresses
as I later noticed in the temporary file, the last ip from the v4 range and the first from v6 are glued together
UPD sorry i was using old version before this fix #5
sudo ./ufw-cf.sh --purge prints the following error:
ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.ERROR: Bad source address
.
Total rules deleted: 0
Total rules created: 0
Total rules ignored: 22
Done.
Here are the relevant existing rules in ufw:
...
80,443/tcp ALLOW 173.245.48.0/20 # cloudflare
80,443/tcp ALLOW 103.21.244.0/22 # cloudflare
80,443/tcp ALLOW 103.22.200.0/22 # cloudflare
80,443/tcp ALLOW 103.31.4.0/22 # cloudflare
80,443/tcp ALLOW 141.101.64.0/18 # cloudflare
80,443/tcp ALLOW 108.162.192.0/18 # cloudflare
80,443/tcp ALLOW 190.93.240.0/20 # cloudflare
80,443/tcp ALLOW 188.114.96.0/20 # cloudflare
80,443/tcp ALLOW 197.234.240.0/22 # cloudflare
80,443/tcp ALLOW 198.41.128.0/17 # cloudflare
80,443/tcp ALLOW 162.158.0.0/15 # cloudflare
80,443/tcp ALLOW 104.16.0.0/13 # cloudflare
80,443/tcp ALLOW 104.24.0.0/14 # cloudflare
80,443/tcp ALLOW 172.64.0.0/13 # cloudflare
80,443/tcp ALLOW 131.0.72.0/22 # cloudflare
...
80,443/tcp ALLOW 2400:cb00::/32 # cloudflare
80,443/tcp ALLOW 2606:4700::/32 # cloudflare
80,443/tcp ALLOW 2803:f800::/32 # cloudflare
80,443/tcp ALLOW 2405:b500::/32 # cloudflare
80,443/tcp ALLOW 2405:8100::/32 # cloudflare
80,443/tcp ALLOW 2a06:98c0::/29 # cloudflare
80,443/tcp ALLOW 2c0f:f248::/32 # cloudflare
I'm not sure how to get more debug info as I'm really not proficient in bash. Could you please help take a look?
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.