CloudFlare Integration

[dallasproit]

Do you have an updated timeline on the integration with CF API? Just installed ASL on another server on Friday and we already have about 70K hits on Rule 60158 (Wordpress Login attempt failure). Since most of the sites on this box are on CF, the block via IP doesn't work. I've been adding IPs manually to CF threat control as I see them but there has been 1,818 total sources since install. Thanks!

[scott]

YUp! it will be in the beta this week in the asl-4.0-testing channel.

[dallasproit]

Nice! I can't wait. This will cut my workload down a lot!

[dallasproit]

It's been a couple of months now and I haven't seen it come through yet. Can you give a progress update?

[scott]

Sure, its available from the asl-4.0-testing channel right now under the HIDS settings in ASL Web. Look under "Active Response: Enable Cloudflare Banning"

You can upgrade to the beta with:

yum --enablerepo=asl-4.0-testing upgrade asl asl-web

Otherwise this will be in the next release

[dallasproit]

I did this but there's no field next to Cloudflare Account API key and Cloudflare Email account address. See attached file.

CF

CFIntegration.PNG (21.99 KiB) Viewed 7221 times

[mikeshinn]

New build of the beta will be ready in about an hour.