how make cloudflare waf rule Expression for, that for all DENY access to https://zl.epik.tk/* but h

how make cloudflare waf rule Expression for,
that for all DENY access to https://zl.epik.tk/* but https://zl.epik.tk/u/* ALLOW access for all? please help

Zybyr•3/6/24, 8:21 PM

reading documentation on how to redirect ..

ZZybyr switched to one hostname. How to redirect?

Chaika•3/6/24, 8:22 PM

which one did you pick, the root https://vmlx.orghttps://vmlx.org?

Zybyr•3/6/24, 8:24 PM

@Chaika ptero.vmlx.org

Zybyr•3/6/24, 8:24 PM

I am thinking it would be good to create a rurle to redirect vmlx.org to ptero.vmlx.org

!! EpickyHrac how make cloudflare waf rule Expression for, that for all DENY access to https:...

! EpickyHracOP•3/6/24, 8:25 PM

https://zl.epik.tk/u/5ghKFW.png but dont work

ZZybyr ```cs Access to XMLHttpRequest at 'https://ptero.vmlx.org:8443/api/system' from ...

Chaika•3/6/24, 8:25 PM

then that error makes no sense, shouldn't be getting that if you're on the ptero subdomain. Are you still getting it?

Zybyr•3/6/24, 8:26 PM

@Chaika no, the error only happens when I use vmlx.org. It does not happen when I use ptero.vmlx.org. This is why I want to create a rule to redirect vmlx.org to ptero.vmlx.org

!! EpickyHrac https://zl.epik.tk/u/5ghKFW.png but dont work

! EpickyHracOP•3/6/24, 8:26 PM

OK work

I have same ip on list
I switch Ip from unlimited mobile data than isp to test

!! EpickyHrac https://zl.epik.tk/u/5ghKFW.png but dont work

Chaika•3/6/24, 8:26 PM

Might be easier if you made a post in #general-help. I don't understand in which way it doesn't work though, or how that rule matches up with the one you were talking about

ZZybyr @Chaika no, the error only happens when I use vmlx.org. It does not happen when ...

Chaika•3/6/24, 8:28 PM

oh, you can make a simple one under Redirect Rules -> Single Redirects, something like:

Chaika•3/6/24, 8:28 PM

concat("https://ptero.vmlx.org", http.request.uri.path)concat("https://ptero.vmlx.org", http.request.uri.path)

Chaika•3/6/24, 8:28 PM

Bulk Redirects can be useful too but are a bit more annoying to setup, and Page Rules are going away eventually

Zybyr•3/6/24, 8:29 PM

I just set it up the redirect rule from vmlx.org to ptero.vmlx.org and its working fine (I think

)

Zybyr•3/6/24, 8:30 PM

it is redirecting and no more errors

Chaika•3/6/24, 8:30 PM

You're not keeping the path and you're using a 301 (permanent redirect, cachable) redirect instead of 302, but close enough. It'll work if you don't care about the path or changing it in the future

Zybyr•3/6/24, 8:37 PM

@Chaika let me set it up the way on your screenshot

Chaika•3/6/24, 8:37 PM

If you don't care about the path or it being cached for up to an hour you don't need to, was just saying

Zybyr•3/6/24, 8:38 PM

I don't know the difference

VVero coool, any specific reason why 😄 ?

Firecuba™ (Shoresy)•3/6/24, 9:51 PM

love the fact it keeps my brain engaged

az•3/6/24, 11:48 PM

do workers subrequests use h3 ?

Original message was deleted

Hello, I’m Allie!•3/6/24, 11:54 PM

You need to transfer it to an external registrar, then transfer it back

Aaz do workers subrequests use h3 ?

James•3/7/24, 12:16 AM

fetch

fetch

inside workers is all http/1.1http/1.1 today afaik

JJames `fetch` inside workers is all `http/1.1` today afaik

az•3/7/24, 12:18 AM

does it persist connections ?

daniel•3/7/24, 12:37 AM

wasn't the __cfduid__cfduid cookie deprecated? i still see it on some cloudflare sites i visit

Erisa•3/7/24, 12:41 AM

Which sites?

Erisa•3/7/24, 12:42 AM

There is similarly named __cfruid__cfruid and _cfuvid_cfuvid which are in use for rate limiting users, but __cfduid__cfduid shouldn't be set anymore by us to my understanding
https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/

EErisa Which sites?

daniel•3/7/24, 12:48 AM

discord.com

daniel•3/7/24, 12:48 AM

the cookie name is a little bit different though: __dcfduid__dcfduid

Ddaniel discord.com

Erisa•3/7/24, 12:50 AM

Any other sites? That one not starting with __cf__cf and having the dd makes me think its something custom. I can't see any trace of that cookie being something known to us as one we use

daniel•3/7/24, 12:56 AM

oh nvm i think that is a custom cookie

Erisa•3/7/24, 12:57 AM

No worries

David•3/7/24, 11:49 AM

How can I block /wp-admin but allow /wp-admin/admin-ajax.php? in zero trust

nickchomey•3/7/24, 12:40 PM

It appears that chromium zstd support is coming along nicely, with the main issue marked as fixed yesterday.

https://issues.chromium.org/issues/40196713

Is this something cloudflare is following and will be implementing through workers, cache, r2 etc?

DDavid How can I block /wp-admin but allow /wp-admin/admin-ajax.php? in zero trust

Erisa•3/7/24, 12:46 PM

Create an Access Application for /wp-admin set to Allow and then create another for /wp-admin/admin-ajax.php which is set to Bypass and allows EveryoneEveryone

Thalyson Rafael•3/7/24, 2:12 PM

I ran a peering request but the sessions were not logical, how do I make a new request?

Thalyson Rafael•3/7/24, 2:13 PM

Original message was deleted

Chaika•3/7/24, 3:57 PM

I don't think its that bad, iirc its built on DOs and Websockets. DOs get their limits reset on every new websocket message, so you'd just be paying for a Durable Object to be active for a while

Chaika•3/7/24, 4:29 PM

nowadays you have websocket hiberation too, if you refactored it to use that could be really cheap

David•3/7/24, 4:56 PM

Is Anyone else No longer able to customize the app launcher? it was in beta and I changed some of the settings but now I can't change anything because the setting isn't available
https://developers.cloudflare.com/cloudflare-one/applications/app-launcher/#customize-app-launcher-appearance

Cloudflare Docs

App Launcher · Cloudflare Zero Trust docs

With the Access App Launcher, users can easily open all applications that they have access to from a single dashboard.

Chaika•3/7/24, 4:58 PM

I only see it on my Enterprise Zero Trust account

DDavid How can I block /wp-admin but allow /wp-admin/admin-ajax.php? in zero trust

fernvenue•3/7/24, 9:00 PM

Add them as different applications maybe?

who wants to vex mutumboooo•3/7/24, 10:30 PM

I'm having a strange problem with this particular account. when I go orange cloud, the site returns a 520 error code. when I go gray cloud, the site works. The webhost (wp engine) of course says this is not their fault ... but I can't see why it'd be cloudflare's fault either. any suggestions?

for those interested, the site is in the 520 error state at the moment: https://hellowaitwhat-stage.com/

zkevm 🤖•3/8/24, 5:23 AM

Hello, I was using cloudflare images in past month, and for some reason I can not purchase again. Billing setted up correctly

zkevm 🤖•3/8/24, 5:29 AM

I am getting Internal Server Error (Code: 1000)

Erisa•3/8/24, 8:37 AM

?support

Flare•3/8/24, 8:37 AM

To contact Cloudflare Support about an issue, please visit the Support Portal and fill in the form on the portal. After submission, you will receive confirmation over email.

Some issues, such as Account or Billing related issues, cannot be solved by the community.
Any plan level (including Free plans) can open tickets for Account, Billing or Registrar ticket categories. Make sure to select the correct category to ensure it goes to the right place.
For more information on the methods by which you can contact Support for your plan level, see Contacting Cloudflare Support - Cloudflare Docs

Zybyr•3/8/24, 11:22 AM

hello. does cloudflare by default block certain ports?

Zybyr•3/8/24, 11:26 AM

just read the answer to this question in the documentation, thanks!

sulaimanshabbir•3/8/24, 11:41 AM

i am not able to use library chat-stream in cloudflare worker. is there any suggestion? i currently created a hello world worker and importing StreamChat from stream-chat

how make cloudflare waf rule Expression for, that for all DENY access to https://zl.epik.tk/* but h

Similar Threads

Similar Threads

Similar Threads