Do you have a firewall in front of the Apache instance that might be blocking things? 502 generally

Do you have a firewall in front of the Apache instance that might be blocking things? 502 generally sounds like there's an issue with Apache or whatever's behind Apache though.

Firecuba™ (Shoresy)•3/6/24, 6:24 PM

Starting to love Cloudflare more and more!

FFirecuba™ (Shoresy)Starting to love Cloudflare more and more!

Vero•3/6/24, 6:27 PM

coool, any specific reason why

Zybyr•3/6/24, 6:30 PM

when using proxied domains in dns manager, my website running nginx does not load. It loads only with "dns only" option. What can I do on the nginx server end to get it to load?

Chaika•3/6/24, 6:32 PM

Well, what's the error, exactly?

Zybyr•3/6/24, 6:37 PM

and now its loading ... wtf

IIsaac McFadyen Do you have a firewall in front of the Apache instance that might be blocking th...

Eduardo•3/6/24, 6:38 PM

No, I don't have any firewall, that's why i'm asking

CChaika Well, what's the error, exactly?

Zybyr•3/6/24, 6:46 PM

GET https://wings.vmlx.org:4437/api/system net::ERR_CONNECTION_TIMED_OUT

Zybyr•3/6/24, 6:46 PM

started getting the error again after server reboot

ZZybyr GET https://wings.vmlx.org:4437/api/system net::ERR_CONNECTION_TIMED_OUT

Chaika•3/6/24, 6:47 PM

Cloudflare Proxy doesn't support that port
https://developers.cloudflare.com/fundamentals/reference/network-ports/

Cloudflare Docs

Network ports · Cloudflare Fundamentals docs

Learn which network ports Cloudflare proxies by default and how to enable Cloudflare’s proxy for additional ports.

Chaika•3/6/24, 6:47 PM

you'd want to change it to a supported one, or if that wings subdomain is entirely just for that, you could make an Origin Rule overriding to that port (but you'd connect on 443 and it'd just connect to your origin on 4437)

Zybyr•3/6/24, 6:49 PM

@Chaika thanks for pointing this out. How about port 8443? Is it supported by default?

Chaika•3/6/24, 6:49 PM

yea it's on that list there. Not supported for caching though

Zybyr•3/6/24, 6:51 PM

with port 8843 i'm getting

Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://ptero.vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
jquery.min.js?t={cache-version}:4 
        
        
       GET https://wings.vmlx.org:8443/api/system net::ERR_FAILED

Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://ptero.vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
jquery.min.js?t={cache-version}:4 
        
        
       GET https://wings.vmlx.org:8443/api/system net::ERR_FAILED

Chaika•3/6/24, 6:52 PM

I get web server is down, most likely meaning wings is not listening/recieving on that port

Zybyr•3/6/24, 6:55 PM

its working now

Zybyr•3/6/24, 6:55 PM

thanks Chaika!

Rapid•3/6/24, 7:55 PM

How can I remove someone who got banned from my ratelimiting rule automatically?

Rapid•3/6/24, 7:56 PM

It is a legit user that I want to remove the block right now

Zybyr•3/6/24, 7:58 PM

how can I get this policy fixed?

nodes:1 Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

nodes:1 Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

RRapid How can I remove someone who got banned from my ratelimiting rule automatically?

Erisa•3/6/24, 7:58 PM

Add the IP to IP Access Rules as "Allow" and they will bypass every security feature on your zone including the existing applied RL block

Erisa•3/6/24, 7:59 PM

Its under Security > WAF > Tools

ZZybyr how can I get this policy fixed? ```cs nodes:1 Access to XMLHttpRequest at 'htt...

Chaika•3/6/24, 8:09 PM

something within ptero/your wings config itself. It seems to think ptero is at

ptero

ptero

subdomain, not at root

Chaika•3/6/24, 8:09 PM

Well, you could potentially use a Transform Rule to override it, but it'd probably be best to fix the root issue

Zybyr•3/6/24, 8:10 PM

the error and problem happens only when I use vmlx.org instead of ptero.vmlx.org in the browser

Chaika•3/6/24, 8:13 PM

You have pterodactyl setup on two different hostnames, it seems?

Chaika•3/6/24, 8:13 PM

Why not just pick one (ex: ptero) and redirect? Or pick root, change config, and redirect from the ptero subdomain

Zybyr•3/6/24, 8:14 PM

you are right, let me try to only use one

Zybyr•3/6/24, 8:18 PM

switched to one hostname. How to redirect?

Zybyr•3/6/24, 8:19 PM

Access to XMLHttpRequest at 'https://ptero.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

Access to XMLHttpRequest at 'https://ptero.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

! EpickyHrac•3/6/24, 8:20 PM

how make cloudflare waf rule Expression for,
that for all DENY access to https://zl.epik.tk/* but https://zl.epik.tk/u/* ALLOW access for all? please help

Zybyr•3/6/24, 8:21 PM

reading documentation on how to redirect ..

ZZybyr switched to one hostname. How to redirect?

Chaika•3/6/24, 8:22 PM

which one did you pick, the root

https://vmlx.org

https://vmlx.org

Zybyr•3/6/24, 8:24 PM

@Chaika ptero.vmlx.org

Zybyr•3/6/24, 8:24 PM

I am thinking it would be good to create a rurle to redirect vmlx.org to ptero.vmlx.org

!! EpickyHrac how make cloudflare waf rule Expression for, that for all DENY access to https:...

! EpickyHrac•3/6/24, 8:25 PM

https://zl.epik.tk/u/5ghKFW.png but dont work

ZZybyr ```cs Access to XMLHttpRequest at 'https://ptero.vmlx.org:8443/api/system' from ...

Chaika•3/6/24, 8:25 PM

then that error makes no sense, shouldn't be getting that if you're on the ptero subdomain. Are you still getting it?

Zybyr•3/6/24, 8:26 PM

@Chaika no, the error only happens when I use vmlx.org. It does not happen when I use ptero.vmlx.org. This is why I want to create a rule to redirect vmlx.org to ptero.vmlx.org

!! EpickyHrac https://zl.epik.tk/u/5ghKFW.png but dont work

! EpickyHrac•3/6/24, 8:26 PM

OK work

I have same ip on list
I switch Ip from unlimited mobile data than isp to test

!! EpickyHrac https://zl.epik.tk/u/5ghKFW.png but dont work

Chaika•3/6/24, 8:26 PM

Might be easier if you made a post in #general-help. I don't understand in which way it doesn't work though, or how that rule matches up with the one you were talking about

ZZybyr @Chaika no, the error only happens when I use vmlx.org. It does not happen when ...

Chaika•3/6/24, 8:28 PM

oh, you can make a simple one under Redirect Rules -> Single Redirects, something like:

Chaika•3/6/24, 8:28 PM

concat("https://ptero.vmlx.org", http.request.uri.path)

concat("https://ptero.vmlx.org", http.request.uri.path)

Chaika•3/6/24, 8:28 PM

Bulk Redirects can be useful too but are a bit more annoying to setup, and Page Rules are going away eventually

Zybyr•3/6/24, 8:29 PM

I just set it up the redirect rule from vmlx.org to ptero.vmlx.org and its working fine (I think

)

Zybyr•3/6/24, 8:30 PM

it is redirecting and no more errors

Chaika•3/6/24, 8:30 PM

You're not keeping the path and you're using a 301 (permanent redirect, cachable) redirect instead of 302, but close enough. It'll work if you don't care about the path or changing it in the future

Zybyr•3/6/24, 8:37 PM

@Chaika let me set it up the way on your screenshot

Chaika•3/6/24, 8:37 PM

If you don't care about the path or it being cached for up to an hour you don't need to, was just saying

Zybyr•3/6/24, 8:38 PM

I don't know the difference

VVero coool, any specific reason why 😄 ?

Firecuba™ (Shoresy)•3/6/24, 9:51 PM

love the fact it keeps my brain engaged

az•3/6/24, 11:48 PM

do workers subrequests use h3 ?

Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://ptero.vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. jquery.min.js?t={cache-version}:4 GET https://wings.vmlx.org:8443/api/system net::ERR_FAILED

nodes:1 Access to XMLHttpRequest at 'https://wings.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

Access to XMLHttpRequest at 'https://ptero.vmlx.org:8443/api/system' from origin 'https://vmlx.org' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The 'Access-Control-Allow-Origin' header has a value 'https://ptero.vmlx.org' that is not equal to the supplied origin.

Do you have a firewall in front of the Apache instance that might be blocking things? 502 generally

Similar Threads

Similar Threads

Similar Threads