Cloudflare free SSL (mixed) blocking registation form

Get help with installation and running phpBB 3.2.x here. Please do not post bug reports, feature requests, or extension related questions here.
Post Reply
User avatar
Mick
Support Team Member
Support Team Member
Posts: 26502
Joined: Fri Aug 29, 2008 9:49 am

Re: Cloudflare free SSL (mixed) blocking registation form

Post by Mick »

Personally? I’d turn CloudFlare off, it causes more problems than it cures. Please fill out the Support Request Template and post it back here to enable us to assist you better.
  • "The more connected we get the more alone we become" - Kyle Broflovski©
  • "The good news is hell is just the product of a morbid human imagination.
    The bad news is, whatever humans can imagine, they can usually create.
    " - Harmony Cobel
User avatar
Mick
Support Team Member
Support Team Member
Posts: 26502
Joined: Fri Aug 29, 2008 9:49 am

Re: Cloudflare free SSL (mixed) blocking registation form

Post by Mick »

You’re paying for ssl?
  • "The more connected we get the more alone we become" - Kyle Broflovski©
  • "The good news is hell is just the product of a morbid human imagination.
    The bad news is, whatever humans can imagine, they can usually create.
    " - Harmony Cobel
User avatar
thecoalman
Community Team Member
Community Team Member
Posts: 5871
Joined: Wed Dec 22, 2004 3:52 am
Location: Pennsylvania, U.S.A.
Contact:

Re: Cloudflare free SSL (mixed) blocking registation form

Post by thecoalman »

Not sure what the specific issue is but I use Cloudlfare without any issue at all. If you are going to use Cloudlfare the server needs mod_cloudflare installed so the real IP of the visitor is passed to Apache. Otherwise all IP's will appear as Cloudflares.

https://www.cloudflare.com/technical-resources/

As far as what option on SSl to use you should use full strict which requires a valid SSL for the domain. If you do not have one Cloudlfare will issue you one for free.
“Results! Why, man, I have gotten a lot of results! I have found several thousand things that won’t work.”

Attributed - Thomas Edison
User avatar
thecoalman
Community Team Member
Community Team Member
Posts: 5871
Joined: Wed Dec 22, 2004 3:52 am
Location: Pennsylvania, U.S.A.
Contact:

Re: Cloudflare free SSL (mixed) blocking registation form

Post by thecoalman »

Mick wrote: Fri Nov 24, 2017 1:08 pm it causes more problems than it cures.
The one important thing it cures is your site no longer at risk for DDOS attack if you have configured everything correctly. It's certainly not any one click wonder protection and there is lot of considerations. You need to have email outgoing from different IP, disallow remote avatar uploads, disallow the feature that will get image sizes etc. The other step to take is to firewall off all connections over port 80 and 443 except for cloudflare.

I will tell you one thing, looking at server logs is "the bomb" when you see nothing but your IP. :D

There is ton of features and it does add more complexity but it's swell worth it IMO.
“Results! Why, man, I have gotten a lot of results! I have found several thousand things that won’t work.”

Attributed - Thomas Edison
Post Reply

Return to “[3.2.x] Support Forum”