A Cloudflare setting that is preventing a Rest API from working

[john91]

Some setting in Cloudflare is prohibiting one of my website’s APIs from working correctly. It must be some sort of default setting, as I haven’t customized this domains Cloudflare’s settings other than the DNS at all. I searched around but I can’t seem find it. I added the APIs IP address it uses to WAF as allow and I went into my server and added them to ipTables. After trying all security protocols etc on my side I simply took the domain off Cloudflare protection and it worked. Anyomne else have a similar issue?

[john91]

Oh for reference sake here is what I’ve got going on this server/website:

Wordpress - Client (I know, I know but it’s my client’s mandated platform.)
WPMU DEV - These are the plugins that aren’t working correctly. Nifty SEO tool when it’s up and running, as well as an automated Image Compressor. ( Both Tools are malfunctioning)

PHP 8.1 & Most the Common Mods
Mysql 8.0.33
Ubuntu 20.10
nginx
UFW & IpTables, Etc.

[cbrandt]

Hi,

Please visit your website and perform the action that would normally result in a request to the Rest API being blocked. Make sure you have Developer Tools open (F12).

If the request is blocked with a 403 status code:

1. Wait a few minutes
2. Go to Dashboard > Security > Events. If the request was in fact blocked by Cloudflare, you should find an event related to that block action. Depending on your site traffic, you may need to filter by IP address, User Agent, URI Path, etc. to find it. Check the “Service” that blocked it.
3. If this was
   a) Bot Fight Mode, disable this feature.
   b) Super Block Fight Mode, create a WAF Custom Rule to Skip it for the specific situation, with relevant conditions such as the URI Path and the visitor’s IP, for example;
   c) WAF Managed Rule, you need to create a WAF Exception for that rule. See: Add a WAF exception in the dashboard · Cloudflare Web Application Firewall (WAF) docs
   d) WAF Custom Rule, you need to edit it accordingly.

If instead the request was unsuccessful due to a 5XX error, please see this Community Tip for how to investigate and mitigate the issue:

Community Tip - Fixing 5XX Errors & All 5XX Tips

Introduction Use this Community Tip to understand more about 5XX errors, identify if they are from the origin server or the proxy, and click-through to supporting Community Tips for troubleshooting. Background Generally, 5xx error codes indicate that an error or unresolvable request occurred on the server side, whether that is a proxy or the origin host. The server was able to detect the error and thus will not return the potentially malformed response to the client. These error codes be used…

[Laudian]

@john91

Ubuntu 20.10

That is quite brave of you. 20.10 has reached end of life in July 2021, meaning it hasn’t received any updates since then. You should really use Ubuntu LTS versions in a server environment, which receive support for 5 years.