Bot Fight Mode is blocking Dlvr.it since last week

What is the name of the domain?

112barneveld.nl

What is the error message?

HTTP 403 - Forbidden - via pull

What is the issue you’re encountering

Since last week Dlvr.it is not passing the Bot Fight Mode challenge from Cloudflare anymore with a “HTTP 403 - Forbidden - via pull” as result. allowlisting IP address or User Agent is not helpful since other security products cannot be used to skip Bot Fight Mode.

I’ve had the Bot Fight Mode enabled for years without problems. Did something change on Cloudflare side? I wonder why CF doesn’t disable bot protection on RSS feeds by default. They’re supposed to be readable by bots.

What steps have you taken to resolve the issue?

Turn off Bot Fight Mode and everything works well.

Doesn’t seem to be on the Verified Bot list :thinking:

May I ask where? Did you add it to the IP Access Rules with the action “allow” or?

Are you using free or paid plan type? :thinking:

1 Like

I’m using the free version so other security products like WAF rules cannot be used to skip Bot Fight Mode.

I had no problems with Dlvr.it and the Bot Fight Mode turned on for years until a few days ago.

I don’t understand why Dlvr.it is not (anymore) on the list with Verified Bots.

Unfortunately, I am not aware if it was since before on the Verified Bot list :thinking:

I suggest try with checking your Security Events, then follow-up the IP and ASN, therefrom allowlist it via IP Access Rules to see if it helps until we find a permanent solution.

1 Like

Allowlist it via IP Access Rules is not possible since I’m using the free version. Other security products cannot be used to skip Bot Fight Mode.

I hope CF will add Dlvr.it to the list with Verified Bots so I can turn on the Bot Fight Mode again.

It should be, as it states from the Documentation on the shared link from one of my previous replies.
May I ask have you got some issue with navigating through the menu to get to it? Otherwise somehow it’s disabled for you? :thinking:

1 Like

You are referring to Super Bot Fight Mode (SBFM). I’m using Bot Fight Mode. Other security products (like WAF rules) cannot be used to skip Bot Fight Mode.

No, @fritex is talking about Bot Fight Mode.

As explained in the last section on this page, IP Access Rules can completely Bypass BFM:

I haven’t tried it just know, but unless there have been recent changes to this, it should still work.

Super Bot Fight Mode can be bypassed with WAF Custom Rules, which offer a wide variety of options instead of being limited to IP or ASN.

2 Likes

I think I was too fast with my conclusion and you are right. I added the IP Acces Rule and enabled Bot Fight Mode. So far no errors in my Dlvr.it log file.

Thank you so much for your help!

4 Likes

Can you share what the IP address is? I’m having the same issue as you with Dlvr.it, but can’t figure out what IP address to use.

You need to allowlist the dlvr.it IP address: 54.213.123.74

1 Like

Much appreciated! Hopefully they’ll get themselves cleared on the verified list in case their IP address ever changes.

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.