When I read how the NSA could perfect their PRISM program and the answer is that what cloudflare does would be perfect to control the internet and I don’t even need computing power to break SLL certificates because I issue them myself,Īs a non-US citizen, the question of how to deal with this monster is quickly answered.īut mainly I am concerned that I am blocked by most ( is fortunately not one of them) anyway by the reverse proxy, because Tor exit nodes are blocked in the default settings of each product of cloudflare. Wait a minute, I’m going to put on my alu hat.
Cloudfare has almost 20% under its taper. Thank you for your advice, but I am well aware of what this means. Yes, unfortunately that is the problem we have with these big cloud providers. You can enter ASN founding under Example “Route option” and redirect them to an unused IP at the DMZ as an Gateway IP. Sometimes an whitelist is better than an blocklist. I suggest to use an separate testing environment for a while, to check results and problems you are running into.
If your answer to the two questions above is yes, then search for the ASNs and block these IP group ranges. If you are looking for an emergency pharmacy or doctor at 02:00 in the morning and certain websites do not work, you will understand that what you are planning is not the right way is.Īs you can see and understand, I speak partly from experience. In the end, you end up as an enemy of, your family and your company colleagues… You are then the person who breaks everything, from the point of view of others.Īlso, the later search for reasons and malfunctions, will be a very tedious work for you.įor example, finding a single IP from the huge block and then allowing it, is a considerable effort. If you block all of this provider’s ASNs, you will end up being unhappy, as many everyday websites and/or content will no longer work.Īlso, many important websites as update sites will no longer work. Can’t imagine how many legitimate websites use cloudflare’s CDN service.
0 kommentar(er)
