(04-17-2012, 04:26 PM)DAMINK™ Wrote: Just read this....
cloudflare Wrote:CloudFlare provides a broad level of protection from a wide range of attacks. We do this while minimizing false positives or annoyances to legitimate customers.
Thats all i read. Thats simply not true.
Im a legit customer and i get many false positives thus this thread so i find this to be incorrect.
I think it is first very important to note
why some visitors get challenged with a CloudFlare captcha. Site owners, however, can adjust the challenge behavior by doing any of the following:
1. Change your security level to a lower level (settings->CloudFlare settings->Basic Security Level->change to desired level). Essentially off is an option here, which means only the worst threats are challenged.
2. Site owners can whitelist IPs or IP ranges to override challenge behavior.
If you are a challenged user:
1. Passing the captcha reduces the threat score associated with that IP.
2. The IP will fall off after about two weeks if there is no other bad activity shown from IP.
3. You can request the site owner whitelist your IP when you pass the captcha. This will also override the challenge behavior for that visitor and that site & the whitelisting behavior also reduces the threat score.
Using IP data does obviously create some false positives, but the captcha passing and whitelisting helps remove false positives as well.