Site protection: problems and solutions

Error 504

Problem: When trying to go to a protected site, error 504 appears (in rare cases, error 502).

Solution: This error often occurs due to incorrectly configured rules for filtering incoming connections (firewall) of the web server. You need to check firewall settings, "Site protection: firewall settings". 

Email and FTP don't work

Problem: After connecting protection, mail and ftp do not work.

Solution: This problem occurs because when connecting the "Site Protection"service, reverse proxying is used, and the DDoS-Guard proxy server processes only requests to 80/tcp and 443/tcp ports (while the FTP protocol uses ports 20/tcp and 21/tcp). The best solution is to remove the DNS record for FTP, and use a direct IP address directly when connecting to the server.

For receiving and sending mail, it is recommended to use another server that will not act as a server with the site.

A compromise solution is to add an additional IP address for mail to the same server, but in this case you need to make sure that not only receiving mail, but also sending is performed from the new IP address.