403 Error (Seen as bot), Bypass Rule not working

Hi, i'm the developer of a C# Modding app, Some of our users are seen as bots, they also get challenges on our website.

I tried excluding our fastdl/api from cloudflare "Bot Fight Mode" so they don't get challenges on these url's.

However here is my rule, i'm getting traffic through it and it should apparently Skip Bot Fight Mode, but it doesn't.
The few users having the issues only have access to the URL's when i disable "Bot Fight Mode", am i doing something wrong in my rules ?

Thanks in advance to anyone who try to help.

SuperHelpflare•9/3/25, 6:10 PM

Support AI

I'm happy to help you with your issue.

Based on the documentation, it seems that you're trying to bypass Bot Fight Mode for specific URLs using a WAF custom rule. However, according to the documentation, Bot Fight Mode checks are not implemented in the Ruleset Engine, which means that WAF custom rules may not be able to bypass Bot Fight Mode. (Source: https://developers.cloudflare.com/bots/get-started/bot-fight-mode/)

Instead, you can try creating an IP Access Rule to allowlist the IPs of your users who are being challenged by Bot Fight Mode. This should bypass Bot Fight Mode for those specific IPs. (Source: https://community.cloudflare.com/t/827886)

To create an IP Access Rule, you can follow these steps:

Go to the Cloudflare dashboard and select your account and domain.
Go to Security > Settings.
Filter by Bot traffic.
Go to IP Access Rules.
Click Create IP access custom rule.
Enter the IP addresses of your users who are being challenged by Bot Fight Mode.
Set the Mode to Whitelist.

Please note that you may need to use the old dashboard to create IP Access Rules, as the new dashboard may have a UI bug that redirects you to the WAF Custom Rule creation page. (Source: https://community.cloudflare.com/t/827886)

If you're still having issues, please provide more details about your setup and the errors you're encountering, and I'll do my best to help you troubleshoot.

Sources

Feedback

Feedback has been submitted! Thank you :)

This is an AI generated response, it may not be 100% accurate. Please validate the output. You can ask followups by replying to this message or mentioning me.

TeKOP•9/3/25, 6:14 PM

LMAO

Bot Fight Mode can't be set to ignore certain routes
Super Bot Fight Mode can, and is paid. incredible

20$ for a route ignore check, nice job

Idle•9/3/25, 6:18 PM

?skip-bfm

SuperHelpflare•9/3/25, 6:18 PM

Bot Fight Mode cannot be skipped by WAF Rules or other "Bypass" actions.
Bot Fight Mode is a very aggressive solution that should only be enabled if you are actively under attack.

Remedies:

Upgrade to a Paid plan and use Super Bot Fight Mode
Disable Bot Fight Mode

MaHm0ud•9/19/25, 2:28 AM

MaHm0ud•9/19/25, 2:30 AM

I use it for my game resources fastdl
chosoe user agent

403 Error (Seen as bot), Bypass Rule not working

Similar Threads

Similar Threads

Similar Threads