windowsFirewallForCloudflare.bat

rem 로컬 ip 만 열기. 192.168.0.0~255 를 열었고, 외부 ip 는 , 로 추가하면 된다. ex) 192.168.0.0/24,14.129.120.225
netsh advfirewall firewall delete rule name=allowyourip
netsh advfirewall firewall add rule name=allowyourip dir=in action=allow protocol=tcp remoteip=192.168.0.0/24

rem 80,443 port 는 로컬 ip 와 cloudflare ip 만 열어준다.
rem https://support.cloudflare.com/hc/ko/articles/200170786-원래-방문자-IP-복원
rem 이 설정을 해야 remote_addr 이 원본 ip 가 된다.
netsh advfirewall firewall delete rule name=webserver
netsh advfirewall firewall add rule name=webserver dir=in action=allow localport=80,443 protocol=tcp remoteip=192.168.0.0/24,173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22,2400:cb00::/32,2606:4700::/32,2803:f800::/32,2405:b500::/32,2405:8100::/32,2a06:98c0::/29,2c0f:f248::/32