@Chaika is it possible to set up the redirect rule for to redirect a domain to another domain on a d
@Chaika is it possible to set up the redirect rule for to redirect a domain to another domain on a different port?
Cto resolve to another domain? Only with Enterprise
CYou could just point that domain to the server the other domain is using and use an Origin Rule to override the port, unless you need the dns resolve override as well
VDoes Cloudflare provide browser signature in header or anything I can use to check SPAM signups. We already check by IP address, location etc...
But seems like some spammer still pass and signup with disposable emails and proxied IP.
But seems like some spammer still pass and signup with disposable emails and proxied IP.
VThe application is deployed to Cloudflare pages (paid plan), I'd like to stick with that and don't have any plan to upgrade my site to Enterprise. Any suggestion without the enterprise plan?
I can see BOT
I can see BOT
score, in cf{} request header. Is that or anything else in cf
VAny other suggestion?
Dhi
D- Seems like all the registrations are made from AS45727 (PT Hutchison CP Telecommunications), - if you're not otherwise seeing legitimate traffic from that ISP, you could filter on the AS number.
- A quick glance makes all the IP addresses appear to be from Indonesia, if you're not otherwise seeing (or expecting) legitimate traffic from Indonesia, you could filter traffic from Indonesia away.
- Searching
"fextemp.com"(including the quotes), on Google, leads to various sites confirming as you say, that they (@fextemp.com) are disposable emails.
One result that search is bringing, would be https://github.com/MISP/misp-warninglists/blob/main/lists/disposable-email/list.json, which seem to contain a few thousand domains, that are apparently disposable email address domains.
DStrange way.
However, assuming that the initial attachment(s) are still intact for the final message, it might still be worth a try.
However, assuming that the initial attachment(s) are still intact for the final message, it might still be worth a try.
FDoes Cloudflare Status RSS has filters option?
FFor example...I just wanna subscribe status notification about HKG.
Dis there a way to create dynamic dns records? resolve
1.1.1.1.myzone.com to 1.1.1.1 through Cloudflare?
SIs it possible to create an API to register a domain through Cloudflare?
EThe API for Registrar is only available for Enterprise customers
Sokay thanks
Zyou aren't able to use the undocumented dashboard api routes on the public api with the exact same parameters, without enterprise?
Zig if you need that functionality you might actually use an enterprise plan 
VI was expecting a browser fingerprint id in CF header to better check if request is coming from same device instead IP address(which can be proxied) or managing a list of disposable email(which is always incomplete).
Anyway, thanks for your suggestions. It seems we'd need to build a layer on our API itself.
Anyway, thanks for your suggestions. It seems we'd need to build a layer on our API itself.
Sdoes anyone have a paid plan and the WAF suddendly went back to free plan? I'm getting
exceeded the maximum number of rules in the phase http_request_firewall_custom: 19 out of 5 (Code: 50001) but i have had pro for 5 years or soSok its not just WAF, i completly lost all pro functionality even though its paid for yearly in dec 2023 and the site itself says pro
FTo contact Cloudflare Support about an issue, please visit the Support Portal and fill in the form on the portal. After submission, you will receive confirmation over email.
Some issues, such as Account or Billing related issues, cannot be solved by the community.
Any plan level (including Free plans) can open tickets for Account, Billing or Registrar ticket categories. Make sure to select the correct category to ensure it goes to the right place.
For more information on the methods by which you can contact Support for your plan level, see Contacting Cloudflare Support - Cloudflare Docs
Some issues, such as Account or Billing related issues, cannot be solved by the community.
Any plan level (including Free plans) can open tickets for Account, Billing or Registrar ticket categories. Make sure to select the correct category to ensure it goes to the right place.
For more information on the methods by which you can contact Support for your plan level, see Contacting Cloudflare Support - Cloudflare Docs
Syah, looking forward to get a response monday evening https://community.cloudflare.com/t/pro-site-missing-pro-features/626329/5
Acan i transfer data to r2 from a url ?
Ai want to import my gcp bucket
Si'm pretty sure my own custom rules still work, but the 'managed rules' to protect against certain exploits are gone
Si can however, not edit any of them because free accounts only have 5, and i have more then 5 so it errors out when i try to change one
DYeah, I understood that much, but unfortunately, no, that kind of stuff be on the Enterprise plan as Leo said above. IIRC, I even believe it's an add-on to the Enterprise plan.
I don't know where, or if your budget is limiting you somehow at all, but personally though, I doubt you will ever see any fingerprinting (or similar thing), on any free or perhaps ~ $20/month (Pro-price) plans anywhere, that you can actually rely on, so that you wouldn't have to do other things to secure your infrastructure.
My own personal opinion though, I also wouldn't rely on putting everything on the shoulders of any external third party (be it on Cloudflare or whatever), and expecting the third party to always be "magically" taking care of 100% of your issues all the time.
I don't know where, or if your budget is limiting you somehow at all, but personally though, I doubt you will ever see any fingerprinting (or similar thing), on any free or perhaps ~ $20/month (Pro-price) plans anywhere, that you can actually rely on, so that you wouldn't have to do other things to secure your infrastructure.
My own personal opinion though, I also wouldn't rely on putting everything on the shoulders of any external third party (be it on Cloudflare or whatever), and expecting the third party to always be "magically" taking care of 100% of your issues all the time.
DYour screenshot above were showing 10 accounts in ~14 minutes, from AS45727 (PT Hutchison CP Telecommunications), - you could also use these variables, and through the Cloudflare API adjust things and temporarily block networks for some time, if there have been too many registrations within a short time interval.
One account per ~ 1 minute from the same iSP? Whether that would be 'legitimate', or not, would depend on both yours and my network, in your network it might be unlikely (and likely illegitimate), but in my network, it could be necessary, and so forth.
(But that one would also require some sort of maintenance from your own end).
One account per ~ 1 minute from the same iSP? Whether that would be 'legitimate', or not, would depend on both yours and my network, in your network it might be unlikely (and likely illegitimate), but in my network, it could be necessary, and so forth.
(But that one would also require some sort of maintenance from your own end).
DThanks for the confirmation! 
Uany idea how long changing ssl encryption mode takes to come into effect?
Uive been waiting 7 mins so might be having an issue with something else then
Ui keep getting ERR_TOO_MANY_REDIRECTS which seems to predominantly be a cf ssl issue
D"As usual", indeed.
I would personally just go with your own customised WAF rules that are tailored and regularly adjusted to meet your demands and expectations, instead of these [super] bot fight modes.
I would personally just go with your own customised WAF rules that are tailored and regularly adjusted to meet your demands and expectations, instead of these [super] bot fight modes.
DDid you purge the Cloudflare edge cache, to ensure the redirects aren't cached there?
https://dash.cloudflare.com/?to=/:account/:zone/caching/configuration
https://dash.cloudflare.com/?to=/:account/:zone/caching/configuration
UI'll try that now thanks
DThere is also the possibility that your browser(s) may have cached the redirect(s).
UI've tried on an emulated browser as well and it still wasn't working so I don't think it is that
DIt might not be the case, but redirects could theoretically be cached everywhere in the chain, where there is an option for caching.
UI see. I'll have a look into the caching.
UI turned on development mode so it should be bypassing caching but still experiencing the redirect issue.
DWith development mode on, I'd lean a bit more towards taking a look at your server, rather than Cloudflare.
D... assuming you have actually set the proper Full (STRICT) mode.
Uomg I was setting the ssl rule on the wrong domain
U
UIt works now
LHelp please. Unable to add a custom domain to Worker & Pages. The domain is 备.com and the error I receive is "Please enter a valid domain."
CTry adding the IDN domain as a custom domain
LWorked. Thanks 
GHey! I’ve seen certain cloudfare websites say things like “verifying your a human” when the page first loads, does anyone know how to do that and any other measures to make the site more secure against bots?
DIs there any response header that a server can send to a client to tell it that it should ignore the query string for caching?
