cloudflare + fail2ban and fail2ban always banning the ip of cloudflare

swsemnto

I already whitelist my IP, however the fail2ban is banning the ip of cloudflare which make site goes down on my end

anyway I can fix this? thank you

aapanel_power

Hello, brother, if you use CDN, do not use the fail2ban plug-in. This plug-in cannot intelligently identify whether the ip passed from the backend is the ip of the CDN.

swsemnto

aapanel_power
i use set_real_ip_from on nginx seems to be working?

aapanel_power

swsemnto Hello, brother, but fail2ban is not obtained like this. He did not filter the real ip of the client from the header

swsemnto

i see, i don't wanna remove either cf and fail2ban(had so much attack log received)

AntonioFirmeza

Add the cloudflare IPs to the fail2ban white list.
https://cloudflare.com/ips

(Use List IPv4)

AntonioFirmeza

That's how I solved it on my server.