Error 1000 by Cloudflare?
My static file proxy p.rst.im got an error sometime, saying: Error 1000 DNS points to prohibited IP I tried to tcpdump on port 80
1 |
tcpdump -i eth0 -s 0 -A port 80 |
And I found some header added by cloudflare:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 |
GET /ajax/libs/bootstrap-fileinput/4.3.4/js/fileinput.min.js HTTP/1.0 Host: cdnjs.cloudflare.com Connection: close Accept-Encoding: gzip CF-IPCountry: .. X-Forwarded-For: ........ CF-RAY: 2d4f47e8f7562e27-NRT X-Forwarded-Proto: https CF-Visitor: {"scheme":"https"} cache-control: max-age=0 upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 accept-language: zh-CN,zh;q=0.8,en-US;q=0.6,en;q=0.4,zh-TW;q=0.2 CF-Connecting-IP: ........ ... ... HTTP/1.1 403 Forbidden Date: Fri, 19 Aug 2016 17:21:15 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: max-age=8 Expires: Fri, 19 Aug 2016 17:21:23 GMT X-Frame-Options: SAMEORIGIN Server: cloudflare-nginx CF-RAY: 2d4f47ea74b70b50-NRT Content-Encoding: gzip |
Cloudflare might treat it infinitely loop, so I remove these headers on nginx:
1 2 3 4 5 6 |
proxy_set_header CF-Connecting-IP ""; proxy_set_header CF-IPCountry ""; proxy_set_header CF-Visitor ""; proxy_set_header CF-RAY ""; proxy_set_header X-Forwarded-For ""; proxy_set_header X-Forwarded-Proto ""; |
Now, what caused it: Here is how … Continue reading “Error 1000 by Cloudflare?”