Re: [pfSense] Pfsense + Cloudflare

2015-04-30 Thread Steve Yates
Seth Mos wrote on Thu, Apr 30 2015 at 10:09 am:

> If you want any meaningful address information you need to look at the
> headers that the proxy service provides you.

I was going to point that out (CloudFlare sends the IP in HTTP request 
headers) but that won't help at the firewall/packet level.  At that point 
(theoretically) I suppose CloudFlare would have to have functionality to act as 
a firewall?  And pfSense configured to only allow traffic from it.

--

Steve Yates
ITS, Inc.


___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


Re: [pfSense] Pfsense + Cloudflare

2015-04-30 Thread Seth Mos
Roy Sandbergen - Webguru schreef op 30-4-2015 om 16:02:
> Hi All,
> 
> Does anyone have his site behind pfsense and cloudflare?
> 
> I have the problem that my pfsense only see the ipadresses of the cloudflare 
> servers not the original ip of the client. Does anyone have a solution for 
> that problem?
> I cannot find a solution online for Pfsense 2.2 icm cloudflare

That's how cloudflare works, it's basically a great box Varnish (proxy)
box, so yes, you will only see the cloudflare servers.

If you want any meaningful address information you need to look at the
headers that the proxy service provides you.

Regards,

Seth
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold


[pfSense] Pfsense + Cloudflare

2015-04-30 Thread Roy Sandbergen - Webguru
Hi All,

Does anyone have his site behind pfsense and cloudflare?

I have the problem that my pfsense only see the ipadresses of the cloudflare 
servers not the original ip of the client. Does anyone have a solution for that 
problem?
I cannot find a solution online for Pfsense 2.2 icm cloudflare

I know there is a rpm for Centos " rpm -i mod_cloudflare-elX.latest.rpm"



Best Regards,

Roy Sandbergen
___
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold