Create an exclusion rule from Bot Fight Mode for a specific UserAgent?

What is the name of the domain?

cncted.world

What is the issue you’re encountering

HostBill (billing app) cannot “self-update” because of Cloudflare’s Bot Protection

What is the current SSL/TLS setting?

Flexible

What are the steps to reproduce the issue?

Our HostBill install cannot self-update when Bot Fight Mode is enabled. I’ve attached a screenshot of the Event.

Is there any way I could exclude a specific user-agent (“HostBill”) from the Bot Fight protection? Thank you

Screenshot of the error

No. You can’t configure Bot Fight Mode with Custom Rules.
For that, you need Super Bot Fight Mode, which is available on Pro plan.

If they have a static IP address, you can allow that with an IP Access Rule instead.

1 Like

If we are referring to the host/source IP, yes, it’s a static IP.

I am not sure about the destination IP.

Could you please point me in the right direction? Thank you

Go to Security → WAF → Tools and create an IP Access Rule for HostBill’s IP address.

1 Like

I already made this, but it doesn’t seem to work.

I triple-checked and the “Value” IP is the same as the server’s IP (HostBill).

Any hints on this? Thank you

That’s not the same IP as in your first screenshot.

FACEPALM! Darn IPv6.

Thank you, you saved my day!

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.