CF Images not loading (403) due to new CF managed firewall rules

[pepijn]

Hi, using CF images to resize some images on our website, like:
https://xxxxx.nl/cdn-cgi/image/w=980,h=350,fit=cover,f=auto/https://xxxxxx.nl/wp-content/uploads/2013/09/img-001.jpg

Since I deployed the NEW CF firewall rules, images are not loading anymore. We get this error when the images are accessed directly:

ERROR 9408: Could not fetch the image — the server returned HTTP error 403 Forbidden

When the CF “Cloudflare Managed Ruleset” is disabled the images start loading again. So there is a CF internal conflict. Something for @cloudflare to figure out. But in the meanwhile, which of the 307 rules do i disabled to get these images working again?

[cbrandt]

You should visit Security Events and find one event where one of your images were blocked. Then follow the instructions I gave to a similar topic.

"Sorry, you have been blocked" While Adding Code to WordPress Header Plugin

No need to apologise, we’re all learners here. In a WAF Events screen, you see, among other things: [image] Hover you mouse over the last line of the value that says “Rule”, and copy it. You’ll paste it later when adding the exception. [image] When you’re adding an exception: [image] Then on the next screen: [image] Once you click on the appropriate Ruleset, you’ll see a screen that lets you search for a Rule. After you paste the Rule ID you copied before, the rule will appear, with a …

[pepijn]

Thanks for the directions. I needed to disable rule:
Drupal - Anomaly:Header:X-Forwarded-For - CVE:CVE-2018-14774

Not even using Drupal, so no idea why it is enabled anyway.