Firewall Whitelist is not being respected by Bot Fight Mode

Website, Application, Performance Security
1

Hi all,

I have created a Firewall Rule to whitelist certain IP addresses, but for some reason, Bot Fight Mode is still causing requests from whitelisted IPs to get trapped by Bot fight mode / Managed Challenge

Here is the rule I created:

(ip.src eq 3.4.13.140) or (ip.src eq 54.86.50.139)

If I add the IP address to IP Access Rules, it works fine.

Am I missing something here?

2

You can’t bypass Bot Fight Mode with Firewall Rules.

If you only have Bot Fight Mode (free plan), any IP Access Rules present will disable it. However, if you have Super Bot Fight Mode (Pro Plan or higher), you can use IP Access Allow action rules to bypass it.

The current version of BFM/SBFM has limited control. You can’t bypass or skip BFM/SBFM using Firewall Rules or Page Rules. SBFM can be bypassed with IP access “Allow” action rules. BFM will be disabled if there are any IP access rules present.

https://support.cloudflare.com/hc/en-us/articles/360035387431#5KX8t3C6SObnoWs5F6YOlU

3

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.