5 ms·
Presumably if your site is behind Cloudflare then this strategy won't work, right? Since the IP addresses that Security Trails sees are just of Cloudflare rathe
by theunixbeard 4y ago
Presumably if your site is behind Cloudflare then this strategy won't work, right? Since the IP addresses that Security Trails sees are just of Cloudflare rather than your actual Heroku IPs...?
Or is it possible in the Cloudflare dashboard there is somewhere to see your Heroku server's IP address?
- bfirsh 4y agoYou need to put in the herokudns.com address that the CNAME is pointing at – e.g. stark-wisteria-rnbgkawldfk6gq7m8308ytts.herokudns.com in our case.
- iuliu 4y agoFor me the securitytrails.com website just crashes. I put my DNS target: "stark-horse-mrp4jeowu9yvwpnnma32x6hd.herokudns.com", clicked "Run Check" and it seems to redirect to a failed (no CSS) webpage. Anyone else experiencing this? EDIT: I MANAGED to make it work with this: https://www.nslookup.io/ https://www.nslookup.io/ Make sure to go through all the tabs at the top (Cloudflare DNS, Google DNS) - for me they were all "no A records found". Only "Authoritative" gave me 3 A records which I successfully managed to use.
- jonathanreinink 4y agoYeah securitytrails.com was working for me, but went down about 10 mins ago.
- eappleby 4y agoThat seems to happen when you put in a DNS target that doesn't have any records in SecurityTrails. In that case, it is best to use nslookup
- jplehmann 4y agoThanks so much, it worked for us.
- ladybro 4y agoWorked for us on Cloudflare
- rsweeney21 4y agoWe use cloudflare. If you look up the IP address for your public domain name, you will get the cloudflare IP, yes. If you lookup the IP address of the CNAME target, you will get the heroku IP.
- estafaa 4y agoon Cloudflare do you create A records (with found IPs) with name "www" or "mydomain.com"? also do you make that A record proxied or no? Thank you!
- rickyc091 4y agoUse an A record and type in @. Proxied is fine.
- alexpoof 4y agoFor my domain (https://www.poof.io https://www.poof.io), it's www. If you just use something like https://poof.io https://poof.io, then it would be @. Depends on your site. There should be a few historical IP addresses, but you would create an A record for each of them.
- tdehnke 4y agoWe use Cloudflare + Heroku and it worked for us.