cloudflare security check is blocking our payment webhook route and I have even added a config rule

cloudflare security check is blocking our payment webhook route and I have even added a config rule for it but it's still not working

Can anyone please tell me why?

anuragOP•12/23/24, 2:52 PM

Aanurag cloudflare security check is blocking our payment webhook route and I have even ...

Chaika•12/23/24, 2:55 PM

A Config Rule wouldn't override any of your Custom Rules, Managed Rules, and a lot of other security things

Chaika•12/23/24, 2:55 PM

Check under Security -> Events to see if you can find the block and what service is causing it

CChaika A Config Rule wouldn't override any of your Custom Rules, Managed Rules, and a l...

anuragOP•12/23/24, 2:58 PM

It's blocking requests

CChaika A Config Rule wouldn't override any of your Custom Rules, Managed Rules, and a l...

anuragOP•12/23/24, 2:58 PM

and I have also created a WAF rule (I created rule in every place because I couldn't understand where to put rule, it's all confusing)

Walshy•12/23/24, 2:59 PM

?bfm

Aanurag It's blocking requests

Chaika•12/23/24, 2:59 PM

Bot Fight Mode (for free zones) cannot be skipped by custom rules or config rules. You can only turn it on/off

Walshy•12/23/24, 2:59 PM

(we need a tag for bfm..)

MahirShah•12/23/24, 2:59 PM

Hello There..

I have been using Cloudflare using since 5-6 months now.. I wanted to redirect pages without the Cloudflare Proxy (Orange Cloud)..

If someone cloud help me with this that would be great..

Walshy•12/23/24, 3:00 PM

Well no proxy means we don't handle the request, so you'd need to do it at the origin

Walshy•12/23/24, 3:00 PM

Which would be out of scope for support here

CChaika Bot Fight Mode (for free zones) cannot be skipped by custom rules or config rule...

anuragOP•12/23/24, 3:00 PM

It's okay, can you please tell me how do I disable it? I don't see any menu under security

MahirShah•12/23/24, 3:00 PM

Ok.. Thanks for the Information..

Aanurag It's okay, can you please tell me how do I disable it? I don't see any menu unde...

Chaika•12/23/24, 3:01 PM

Security -> Bots

CChaika Security -> Bots

anuragOP•12/23/24, 3:03 PM

Thank you it's working now

CChaika Bot Fight Mode (for free zones) cannot be skipped by custom rules or config rule...

anuragOP•12/23/24, 3:05 PM

For our one app, we're getting browser security check for our posthog proxy via browser security check
This can be turned off by rule right?

CChaika Bot Fight Mode (for free zones) cannot be skipped by custom rules or config rule...

anuragOP•12/23/24, 3:05 PM

and what do you mean by free zones? if I upgrade can I configure it?

Aanurag For our one app, we're getting browser security check for our posthog proxy via ...

Chaika•12/23/24, 3:06 PM

Yes, you can disable it under Security -> Settings or bypass it via Custom Rules

Aanurag and what do you mean by free zones? if I upgrade can I configure it?

Chaika•12/23/24, 3:06 PM

Pro or higher gets Super Bot Fight Mode which can be skipped via Custom Rules

CChaika Pro or higher gets Super Bot Fight Mode which can be skipped via Custom Rules

anuragOP•12/23/24, 3:06 PM

Oh no problem I'll upgrade to Pro

Chaika•12/23/24, 3:07 PM

(although it's worth noting Super and normal Bot Fight Mode are both meant as high security features intended to quickly help customers under active attack stop as many bots as possible.
Some users get annoyed when they get challenged, depends on your user base)

CChaika (although it's worth noting Super and normal Bot Fight Mode are both meant as hi...

anuragOP•12/23/24, 3:07 PM

so it's recommended to keep it off and only turn it on in case of emergency?

Aanurag so it's recommended to keep it off and only turn it on in case of emergency?

Chaika•12/23/24, 3:09 PM

unless you really need it (constantly under attack/want to get rid of bots at all costs), I wouldn't recommend keeping it on, yea. Espec if your site is static and you can just cache pages and not worry about attacks as much. It also just won't be effective at all if you have an API for example, just have to disable it entirely at least on that subdomain (need sbfm for that of course), it's just going to false positive and cause issues, meant for web/user traffic

CChaika unless you really need it (constantly under attack/want to get rid of bots at al...

anuragOP•12/23/24, 3:11 PM

Sorry what's sbfm?

Aanurag Sorry what's sbfm? 😅

Chaika•12/23/24, 3:12 PM

opps sorry
Bot Fight Mode (free anti-Bot solution) = BFM
Super Bot Fight Mode (Pro or higher) = SBFM

CChaika opps sorry Bot Fight Mode (free anti-Bot solution) = BFM Super Bot Fight Mode (...

anuragOP•12/23/24, 3:12 PM

Got it

CChaika opps sorry Bot Fight Mode (free anti-Bot solution) = BFM Super Bot Fight Mode (...

anuragOP•12/23/24, 3:13 PM

Thanks for the help @Chaika

Have an amazing day

Marcel•12/23/24, 3:15 PM

Hey ppl, looking forward to learning stuff about R2 and rclone here

PixDeVl•12/23/24, 5:16 PM

More random little questions from a curious little goblin, how many Community Champions are there currently/ever? love the concept of the idea of promoting positive community members and rewarding them for their contributions, so wondering :)

SuperHelpflare•12/23/24, 5:21 PM

Bot Fight Mode cannot be skipped by WAF Rules or other "Bypass" actions.
Bot Fight Mode is a very aggressive solution that should only be enabled if you are actively under attack.

Remedies:

Upgrade to a Paid plan and use Super Bot Fight Mode
Disable Bot Fight Mode

PPixDeVl More random little questions from a curious little goblin, how many Community Ch...

Erisa•12/23/24, 5:55 PM

17 by my count, not including the ones that are since hired and kept their champion role as well as their staff role
the criteria for becoming one and associated perks are listed here https://discord.com/channels/595317990191398933/775391577790611466/1304449131623747645

EErisa 17 by my count, not including the ones that are since hired and kept their champ...

PixDeVl•12/23/24, 5:59 PM

Yeah, that’s where I saw the concept in the first place. Also, super interesting that the amount of community members who have become employees is in the plural, love to see it

Erisa•12/23/24, 6:01 PM

i went full circle, green > orange > back to green

Erisa•12/23/24, 6:02 PM

its nice that i was able to regain the community champion title after being employed for a year and a half

Original message was deleted

Chaika•12/23/24, 6:04 PM

opps now we have two

Chaika•12/23/24, 6:04 PM

?bfm

SuperHelpflare•12/23/24, 6:04 PM

Free Plan's Bot Fight Mode cannot be skipped or controlled by Custom Rules or IP Access Rules. Creating/having any IP Access Rules will disable it entirely. Bot Fight Mode is a high security solution intended to help customers under attack stop as many bots as possible. Due to the high security threshold, false positives do happen.
Pro or higher's Super Bot Fight Mode can be skipped via Custom Rules, and Bot Management for Enterprise is entirely customizable.

If you are having false positives or issues with Bot Fight Mode, your only option is to disable it entirely under Security -> Bots: https://dash.cloudflare.com/?to=/:account/:zone/security/bots

Docs: https://developers.cloudflare.com/bots/troubleshooting/

Chaika•12/23/24, 6:04 PM

Your one is a lot simpler tho

Erisa•12/23/24, 6:04 PM

bfm provides detailed information about bfm, skip-bfm cuts to the chase and tells you how to skip it

Erisa•12/23/24, 6:05 PM

makes sense to me

EErisa i went full circle, green > orange > back to green 😛

PixDeVl•12/23/24, 7:55 PM

Oh, you used to work for Cloudflare?interesting!

PixDeVl•12/23/24, 7:55 PM

Would you mind if I asked what kind of work you did?

Erisa•12/23/24, 7:57 PM

was in the support team

Erisa•12/23/24, 7:57 PM

focusing on cdn and developer platform products

EErisa was in the support team

PixDeVl•12/23/24, 7:58 PM

Oh, tickets and such? Interesting

Korapica•12/23/24, 10:08 PM

Hello

Korapica•12/23/24, 10:13 PM

anyone can help

Korapica•12/23/24, 10:13 PM

TheR3alChuckles1•12/24/24, 12:51 AM

hi I'm having a little trouble setting up my ddns I just got a domain from cloudflare was trying to use HA Proxy and all with pfsense, and for the life of me I can't figure out why my domain won't resolve to my LAN IP.

Anyone that can help much be appriciated

pxwg•12/24/24, 3:08 AM

Email Routing

Using Email Routing i was able to add my personal email to the destination addresses and receive the verification email, but when adding a fresh email account i didn't receive any email to confirm the account , is there a way to fix or troubleshoot?

Checked if the email was correct
Checked Spam / Promotions / etc
Deleted and Re-Added the email to the Destination Addresses

Im not sure if its a cloudflare problem, gmail or i did something.
Thanks for the help in advance :))

cloudflare security check is blocking our payment webhook route and I have even added a config rule

Similar Threads

Similar Threads

Similar Threads