CD
Cloudflare Developers•4mo ago
AlexK

WAF Managed rule issue

I'm trying to connect my n8n with my Wordpress website which is proxied via Cloudflare. In the intial setup, my n8n node is getting rejected due to cloudflare page (see it in the response), when i disabled "Bot Protection" feature everything worked fine. Since then, I enabled it back and trying to find the current managed rule to solve this issue. I added all public IPs of n8n but still nothing works. Attaching event example and the current set rule. Any help would be appriciated. 
{
  "action": "managed_challenge",
  "clientASNDescription": "MICROSOFT-CORP-MSN-AS-BLOCK",
  "clientAsn": "8075",
  "clientCountryName": "DE",
  "clientIP": "20.52.126.8",
  "clientRefererHost": "",
  "clientRequestHTTPMethodName": "GET",
  "clientRequestHTTPProtocol": "HTTP/1.1",
  "clientRequestPath": "/wp-json/wp/v2/users",
  "clientRequestQuery": "",
  "datetime": "2025-06-10T02:24:00Z",
  "ref": "",
  "rayName": "94d568f29b084d22",
  "ruleId": "bot_fight_mode",
  "description": "",
  "rulesetId": "",
  "source": "botFight",
  "userAgent": "n8n",
  "matchIndex": 0,
  "metadata": [],
  "sampleInterval": 1
}
{
  "action": "managed_challenge",
  "clientASNDescription": "MICROSOFT-CORP-MSN-AS-BLOCK",
  "clientAsn": "8075",
  "clientCountryName": "DE",
  "clientIP": "20.52.126.8",
  "clientRefererHost": "",
  "clientRequestHTTPMethodName": "GET",
  "clientRequestHTTPProtocol": "HTTP/1.1",
  "clientRequestPath": "/wp-json/wp/v2/users",
  "clientRequestQuery": "",
  "datetime": "2025-06-10T02:24:00Z",
  "ref": "",
  "rayName": "94d568f29b084d22",
  "ruleId": "bot_fight_mode",
  "description": "",
  "rulesetId": "",
  "source": "botFight",
  "userAgent": "n8n",
  "matchIndex": 0,
  "metadata": [],
  "sampleInterval": 1
}
No description
2 Replies
Chaika
Chaika•4mo ago
Free's Bot Fight mode cannot be skipped via rules, it's only on/off. Only Pro's Super Bot Fight Mode can be skipped with Cusotm Rules ?bfm
SuperHelpflare
SuperHelpflare•4mo ago
Free Plan's Bot Fight Mode cannot be skipped or controlled by Custom Rules or IP Access Rules. Creating/having any IP Access Rules will disable it entirely. Bot Fight Mode is a high security solution intended to help customers under attack stop as many bots as possible. Due to the high security threshold, false positives do happen. Pro or higher's Super Bot Fight Mode can be skipped via Custom Rules, and Bot Management for Enterprise is entirely customizable. If you are having false positives or issues with Bot Fight Mode, your only option is to disable it entirely under Security -> Bots: https://dash.cloudflare.com/?to=/:account/:zone/security/bots Docs: https://developers.cloudflare.com/bots/troubleshooting/

Did you find this page helpful?