Web Application Firewall (WAF) Demo: Service Not Activated

Service is Not Activated

This domain is pointing to 127.0.0.1

Checked at: 2018-07-10 13:33 EDT

Automatic Integration

If you have access to a DNS record management panel like cPanel or Plesk, click on the corresponding button below to start the automatic activation of the Website Firewall for your site.

I use cPanel I use Plesk

Activating Website Firewall Instructions

Click the internal domains links below to make sure your site loads. If it does not, please wait few more minutes for it to go live. If it is still not loading, open a ticket here: Website Firewall Request. If the site loads properly from there, move to the next step.

Internal Domains:
- http://0.sucurifirewall.com/
Click here to use our DNS servers

OR

Configure your DNS to point your web traffic to our Website Firewall. To do that, you will need to change the IP address for the "A" record of your website to go to the IP addresses shown below:

Change the DNS A record for the domain example.com to go from 127.0.0.1 to 127.0.0.1

Note that this is done by editing your domain host zone files, often using the cPanel. We have some videos and articles explaining how to do it here Website Firewall Help and FAQ. If you need any help, open a ticket providing the required login credentials and our team will change the DNS records for you.

Configure the DNS settings
The DNS changes can take up to fourty-eight hours (48h) to happen but we usually see it within six hours (6h). Check whether the DNS changes have been propagated
If you have a firewall on your hosting server (like CSF or ModSecurity), we recommend that you whitelist our IP addresses (listed below). As all connections to your hosting server will be passing through our firewall, by whitelisting our IP addresses, it will prevent us from being blocked incorrectly.

127.0.0.1.0/23 127.0.0.1.0/22 127.0.0.1 127.0.0.1/22
We provide Free SSL certificates through LetsEncrypt. They may take a few hours to be generated and require your domain to be activated on our end first. If you want to use a different SSL certificate, please upload your key and certificate before proceeding to the next steps. Click here for instructions to upload the necessary files.

Domain:	example.com
Account Plan:	professional plan upgrade
Hosting IP Address:	127.0.0.1 Manage
Firewall IP Address:	127.0.0.1 127.0.0.1
Internal Domains:	http://0.sucurifirewall.com/

List Firewall IP Addresses (for whitelisting)

127.0.0.1.0/23

127.0.0.1.0/22

127.0.0.1

127.0.0.1/22

How to Activate the Website Firewall

You must wait for DNS propagation. It can take up to fourty-eight hours (48h) to happen but we usually see it within six hours (6h).

You can use our Load Time Tester to check which IP address is associated to your domain from multiple locations, this information will give you an idea of how the DNS propagation is going.

If you have a firewall on your hosting server (like CSF or ModSecurity), we recommend that you whitelist our IP addresses. As all connections to your hosting server will be passing through our firewall, by whitelisting our IP addresses it will prevent us from being blocked incorrectly.

Show IP Addresses

127.0.0.1.0/23

127.0.0.1.0/22

127.0.0.1

127.0.0.1/22

Everything is ready to receive your site traffic

First click these buttons to make sure that your site loads.

http://4378a6a452.10006.sucurifirewall.com/

If it does not, please wait up to ten minutes for it to go live. If after one hour it is still not loading, open a ticket here

33%

Domain Settings - Global Overview

Setting

Value

proxy_active_text

Not Activated

account_plan

professional

domain

example.com

domain_ip

127.0.0.1

enterprise_addr

<Empty>

domain_reverse

127.0.0.1

internal_ip_visible

127.0.0.1 127.0.0.1

internal_domain

4378a6a452.10006.sucurifirewall.com

internal_domain_ip

127.0.0.1

internal_domain_nodes

Setting Values
0: 4378a6a452.11006.sucurifirewall.com
1: 4378a6a452.12006.sucurifirewall.com
2: 4378a6a452.13006.sucurifirewall.com
3: 4378a6a452.14006.sucurifirewall.com
4: 4378a6a452.15006.sucurifirewall.com
5: 4378a6a452.16006.sucurifirewall.com
6: 4378a6a452.17006.sucurifirewall.com

internal_ip_explained

Setting Values
main: ["127.0.0.1"]
backup: []
alternate: []
tags: []
paused: []

colliding_ip

False

security_level

high

admin_access

open

comment_access

restricted

cache_mode

docache

force_sec_headers

enabled

unfiltered_html

block_unfilter

block_php_upload

block_uploads

behind_cdn

<Empty>

http_flood_protection

<Empty>

compression_mode

disabled

spdy_mode

enabled

max_upload_size

detect_adv_evasion

enabled

ids_monitoring

enabled

minimize_static_files

<Empty>

aggressive_bot_filter

disabled

uri_based_caching

disabled

failover_time

ssl_keys

enabled

force_https

https

ssl_sni_tls

disabled

origin_protocol_port

api_info

Setting Values
skey: 66d104406accb04695139a2b5d062361
api_key: f769d6afb882a1130267e016ea40c930
api_str: f769d6afb882a1130267e016ea40c930/66d104406accb04695139a2b5d062361

whitelist_list

Setting Values
0: 127.0.0.1
1: 127.0.0.1

blacklist_list

Setting Values
No data available

whitelist_dirs_list

Setting Values
No data available

blacklist_dirs_list

Setting Values
No data available

noncache_dirs_list

Setting Values
No data available

path_pass_2f_combo

Setting Values
0: <Empty>

block_useragent_list

Setting Values
No data available

block_referer_list

Setting Values
No data available

block_cookie_list

Setting Values
No data available

ahttp_method_list

Setting Values
No data available

domain_alias_list

Setting Values
No data available

block_from_viewing

<Empty>

block_from_posting

<Empty>

brotli

disabled

dns_zone_owner

user@example.com

dns_is_owner

True

dns_records

Setting Values
0: @ 7200 IN CLOUDPROXY 10006
1: @ IN SOA 10.sucuridns.com. soc.sucuri.net. 2016081514 14400 7200 1209600 86400
2: @ NS 12.sucuridns.com.
3: @ NS 14.sucuridns.com.
4: @ NS 18.sucuridns.com.
5: @ NS 19.sucuridns.com.
6: www 7200 IN CLOUDPROXY 10006

Hosting Address

If your site runs on multiple hosting servers, you can add multiple hosting IP addresses for them to be load balanced. You can also provide a failover backup IP address that will be used in case your main hosting IP addresses are not responding.

Note: If there is one single IP address in the list and you want to change it because the system is flagging it as collision prone, add a new address first and then delete the old one. This is necessary because the system requires at least one entry in the list in order to work.

	Type	Region	Hosting Address	Status	Action
	hosting	USA	54.172.230.7 Edit Note test note
	backup		8.8.8.8 Edit Note another test note example

Failover Server Timeout

This option defines the timeframe the system takes to consider the server unhealthy between consecutive errors. Once this threshold has been reached consecutive requests will be directed to the next server.

Note: Changing this value will have no effect if you don't have any backup IP address configured.
- 5 seconds
- 10 seconds
- 30 seconds
- 60 seconds
Maximum Upload Size

The option allows you to restrict the maximum upload size to be allowed through our firewall. Some hosting companies do not allow large uploads and this option will not bypass the limit imposed in these cases, but allows you to restrict a maximum size to reduce the chance of large uploads hitting your server.
- 5 megabytes
- 10 megabytes
- 50 megabytes
- 100 megabytes
- 200 megabytes
- 400 megabytes

Domain Alias

	Domain Alias
	another-example.com
	demo-domain.net

Behind External CDN

Our Firewall already runs on top of a CDN (Content Delivery Network) that speeds your website by bringing your pages closer to the visitors. However, if you still want to use an external CDN, it is supported by our system. All you have to do is configure in your CDN settings so that the origin (hosting) IP is pointed to this address:

127.0.0.1

This will cause all traffic to be routed first through your CDN before hiting our Firewall and your server. Only enable this option if all your traffic is being routed through the CDN first. Note that you won't need to change the DNS A records to our IP address if you do such setup.
Remove this Website

If you wish to cancel your billing (recurring payment), you need to do it here: Website Firewall Billing. If what you want is to delete the domain from your account you can use the button below.

Remember to change the DNS records for your site to point to the real server. Once the domain is deleted from the account all its settings will be reset, and we will keep the logs and statistics collected so far in case that we need to investigate something.

Are you sure to continue?

Sign Up For Your Account

Service is Not Activated

Automatic Integration

Activating Website Firewall Instructions

How to Activate the Website Firewall