Cloudflare has been set up in quite a hurry. Almost everything works so far, except some content can’t be posted online, like some twitter content, or some pictures that can’t be uploaded in articles.
Any idea of the managements rules needed to avoid that ?
On the Firewall tab of your Cloudflare dashboard you will see what rule triggered the block, using the Ray ID to search if you need to. You will need to adjust the rules for the path to stop the WAF triggering on your CMS.
Ok i finally managed to make it work by modifying the XSS HTLM injection rule managed by Cloudflare to lauch a JS challenge instead of blocking, and lowering the OWASP threshold for an other one.
Still need to find why some mails and FTP is not working.
All DNS records associated with email and FTP must be . Cloudflare will not proxy those protocols. Looks for records with names like smtp, pop, imap, ftp, mail etc. and ensure they are set to DNS Only .