Cloudflare Developers•2y ago

<:think:866655482683719722> I wasn't challenged

I wasn't challenged

Poppa•12/31/23, 3:03 AM

Hmm

Chaika•12/31/23, 3:04 AM

You can see Under Attack Mode in the overview tab, or if you go to Security -> Events you can see which a specific request was challenged

Poppa•12/31/23, 3:04 AM

on my pc i wasn't challenged too, but on my mobile i was

Poppa•12/31/23, 3:04 AM

Let me take a look Chaika

MMattIPv4 <:think:866655482683719722> I wasn't challenged

Chaika•12/31/23, 3:04 AM

oh might be a more specific rule then

Chaika•12/31/23, 3:04 AM

Security -> Events would show the exact cause either way

MattIPv4OP•12/31/23, 3:05 AM

The challenge is coming from sell.app though, which is rather odd

MattIPv4OP•12/31/23, 3:05 AM

(I get the challenge via curl)

Poppa•12/31/23, 3:05 AM

Is it possible to disable it fully

Poppa•12/31/23, 3:05 AM

for everyone?

Chaika•12/31/23, 3:06 AM

you wouldn't want to do that, but you can see what's causing it and tone them down

MattIPv4OP•12/31/23, 3:07 AM

This feels weirdly like some sort of double proxy given where the challenge is coming from?

Poppa•12/31/23, 3:07 AM

ye like i use sell.app

Poppa•12/31/23, 3:08 AM

and i added a custom domain to it

Poppa•12/31/23, 3:08 AM

maybe it is because of that.

MattIPv4OP•12/31/23, 3:08 AM

Ahh, I wonder if SSL for SaaS challenges show the underlying host?

MattIPv4OP•12/31/23, 3:08 AM

That seems really odd though

Chaika•12/31/23, 3:08 AM

Probably depends on which configuration it comes from

Chaika•12/31/23, 3:08 AM

Would check sell.app's Security Events in that case

Poppa•12/31/23, 3:09 AM

it's really weird

MattIPv4OP•12/31/23, 3:09 AM

You might need to reach out to sell.app nod

The challenge I got at least seemed to come from their hostname

Poppa•12/31/23, 3:09 AM

my security setting is on low.

Poppa•12/31/23, 3:10 AM

i really think it's from sell.app yea..

Poppa•12/31/23, 3:10 AM

cloudflare has nothing to do with the captcha i think

Poppa•12/31/23, 3:10 AM

since my security is on low

!_r3c4•12/31/23, 3:37 AM

what u have a problem?

!_r3c4•12/31/23, 3:38 AM

maybe can be help

PPoppa my security setting is on low.

!_r3c4•12/31/23, 3:40 AM

if u have a problem with checking a cloudflare bot validation, u can create a 1 waf rules with "SKIP" action, and configure this rule for bypass

Poppa•12/31/23, 3:42 AM

on which rule i can do that @reca

!_r3c4•12/31/23, 3:44 AM

what u need bypass?

Poppa•12/31/23, 3:45 AM

when i enter my website threw my phone i get the captcha..

!_r3c4•12/31/23, 3:45 AM

becouse u use UAM

!_r3c4•12/31/23, 3:45 AM

https://community.cloudflare.com/t/understanding-under-attack-mode/358178

!_r3c4•12/31/23, 3:46 AM

all incomming request can be challanged

!_r3c4•12/31/23, 3:46 AM

if u use uam or ur waf rules it's not good configurated

Poppa•12/31/23, 3:46 AM

Poppa•12/31/23, 3:46 AM

its turned off bro.

!_r3c4•12/31/23, 3:46 AM

send on pm ur waf rules

!_r3c4•12/31/23, 4:31 PM

i can from poland

SStupeFied anyone here in the states or canada willing to run a quick test for me on cloudf...

AlphaCentauri•12/31/23, 4:43 PM

Without WARP: 2432Mbps down & 1936Mbps up
With WARP: 398Mbps Down & 93Mbps Up

(US West)

az•12/31/23, 9:23 PM

can you transfer any domain to cloudflare? are the restrictions only on registering?

Aaz can you transfer any domain to cloudflare? are the restrictions only on register...

Chaika•12/31/23, 9:28 PM

You mean like how CF Registrar only supports specific top level domains / extensions? No, you can only transfer or register domains on supported tlds: https://www.cloudflare.com/en-gb/tld-policies/

Cloudflare

TLD Policies | Cloudflare

TLD Policies

Chaika•12/31/23, 9:30 PM

Those TLD Restrictions don't exist for the CDN service though, just needs to be a registered domain on icann tld/in the public suffix list

CChaika You mean like how CF Registrar only supports specific top level domains / extens...

az•12/31/23, 9:48 PM

ok cool

az•12/31/23, 9:49 PM

and its up to whoever controls the registry to work with cloudflare to register?

Cyb3r-Jak3•12/31/23, 10:13 PM

Try the

.pem

.pem

one. They are the same thing just in two different formats

CChaika Those TLD Restrictions don't exist for the CDN service though, just needs to be ...

Hello, I’m Allie!•12/31/23, 10:21 PM

It just has to be a valid (sub)domain, right? It can be a subdomain even if it isn’t a PSL

<:think:866655482683719722> I wasn't challenged

Similar Threads