Since last week Dlvr.it is not passing the Bot Fight Mode challenge from Cloudflare anymore with a “HTTP 403 - Forbidden - via pull” as result. allowlisting IP address or User Agent is not helpful since other security products cannot be used to skip Bot Fight Mode.
I’ve had the Bot Fight Mode enabled for years without problems. Did something change on Cloudflare side? I wonder why CF doesn’t disable bot protection on RSS feeds by default. They’re supposed to be readable by bots.
What steps have you taken to resolve the issue?
Turn off Bot Fight Mode and everything works well.
Unfortunately, I am not aware if it was since before on the Verified Bot list
I suggest try with checking your Security Events, then follow-up the IP and ASN, therefrom allowlist it via IP Access Rules to see if it helps until we find a permanent solution.
It should be, as it states from the Documentation on the shared link from one of my previous replies.
May I ask have you got some issue with navigating through the menu to get to it? Otherwise somehow it’s disabled for you?
You are referring to Super Bot Fight Mode (SBFM). I’m using Bot Fight Mode. Other security products (like WAF rules) cannot be used to skip Bot Fight Mode.
I think I was too fast with my conclusion and you are right. I added the IP Acces Rule and enabled Bot Fight Mode. So far no errors in my Dlvr.it log file.