+1 steve,  we expect a free car to start just as we expect a free script to be quality.  Oxwall is quality.  There are issues and im sure they are working on them, it takes time since they are not a paid script they dont have a huge team staff and deep pockets.

So in this case Oxwall is not the issue, cloudflare is,  and IMO (in my personal opinion) i think cloudflare is not only overkill but useless in many ways, but thats just me and because i know what im doing, most of the time anyway lol..   And i know enough that i dont have to give up control of my site to someone else.

True and for those that do not know how to do that or build up a process over time then that is fine, but you are giving up control of your site to someone else in that matter. 

It is just as easy to take some time to learn how to do this yourself, keep control of your site and over time you can have the same or better result.    On my error log every day i see the result of my tedious hard work over the last couple of years developing what i have.  I just smile now and laugh and think "sorry idiots cant get in can ya"  lol..   but they dont stop trying, its so funny.

I might also add for clarification for others here, that ip's are not by city state country  you can have ip 123.456.789.000 in the USA and 123.456.799.000 in africa. 

Also too many people want to stop spammers by using some kind of auto pilot control, there are numerious things you can do in that respect but bottom line is, it takes work, it takes paying attention, and it takes learning how to config things correctly, and its always changing. :)

Steve