[Krew]

Many people use Cloudflare to protect them selves from DDOS attacks but fail to realize there are CloudFlare Resolvers that can get their Servers IP.

In order to protect your self you have to take the additional step.

1. Go to CloudFlare.com and login to your account
2. Add your domain to your account.
3. It will scan all your DNS Records and tell you to update your name servers to cloudflares
4. Update your name servers and wait for cloudflare to activate.

Wait for CloudFlare to activate your domain (You will get an email when it is done).

5. Go Login to your cloudflare account
6. Click the gear beside your domain name and click DNS settings



7. Delete all the records except these two



So you delete everything but the

A Record YourDomainName
CNAME WWW

Click the I'm done button at the bottom



No cloudflare resolver will now be able to get your servers real IP.

[Ronnie]

Thanks for this Krew, are those your websites/domains in the image?

[Krew]

Thanks for this Krew, are those your websites/domains in the image?

No, they are not. I asked someone to do those images for me as I do not use CloudFlare.