Enabled security rules in Cloudflare,but they're blocking our image and file upload

[dhilna]

What is the name of the domain?

Create Effective Email Marketing Campaigns and Grow Your Business - Mailercloud

What is the error number?

403

What is the error message?

forbidden

What is the issue you’re encountering

We’ve enabled security rules in Cloudflare, but they’re blocking our image and file upload URLs. To fix this temporarily, we bypassed the affected URLs, but this compromises security. Is there a secure way to allow these uploads without bypassing the urls ?

What steps have you taken to resolve the issue?

To fix this temporarily, we bypassed the affected URLs

What is the current SSL/TLS setting?

Off

What are the steps to reproduce the issue?

The Security (WAF) rules we have ENABLED are

1. Cloudflare Managed Ruleset
2. Cloudflare OWASP Core Ruleset
3. Cloudflare Leaked Credentials Check
   we have also enabled custom rules
   1.Allow Server IPS
   IP Source Address (action skip )
4. Allow INDIA, UK & US
   Country ( action skip )
   3.Block ALL
   Continent (action block )
   4.Allow domain for ai tool
   Hostname (action skip)

[sjr]

Check your security event log for the reason why the request was blocked, then you can craft a narrowly-defined WAF rule with just that exception for that specific URL.
https://dash.cloudflare.com/?to=/:account/:zone/security/events