How to Enhance Security on CloudPanel (IP Blocking, Bot Blocking, Basic Auth & Cloudflare)

[Nemesis]

Could you guide me through the security options available in CloudPanel? Specifically, I'm interested in knowing how to block unwanted IP addresses and bots, enable Basic Authentication for development purposes, and secure my site when using Cloudflare.

 

[Rootali]

CloudPanel provides several built-in security features that can help protect your site:

IP Blocking​

To block specific IP addresses:

• Navigate to Security → Click on "Add IP".
• Enter the IP address in IPv4 or IPv6 format:
  • Example IPv4: 8.8.8.8
  • Example IPv6: 2400:6180:100:d0::99b:5001
• Click "Add IP" to block the entered IP.

Blocked IPs won't be able to access your site or server.

Bot Blocking​

To block specific bots:

• Go to Security → Click on "Add Bot".
• Enter the bot's name (case-insensitive), e.g., FatBot.
• Click "Add Bot".

This feature helps prevent malicious or unwanted bot traffic.

---

Basic Authentication​

This feature restricts public access, useful for development or staging environments:

• In Security, activate the Basic Authentication switch.
• Enter your desired User Name and Password.
• Click "Save".

Visitors will be prompted for credentials when accessing your site.

---

Cloudflare Security Recommendation​

If you use Cloudflare, it's recommended to restrict traffic exclusively through Cloudflare for enhanced security:

• In CloudPanel’s Security settings, enable "Allow traffic from Cloudflare only".
• Ensure your DNS records in Cloudflare have the proxy (orange cloud icon) enabled.

This prevents attackers from bypassing Cloudflare's security measures.

---

These settings help secure your CloudPanel-managed sites effectively against common security threats.